Information Security Manager

About SiCRED

SiCRED sh.a. has been active in the life insurance market since 2003 and provides life, health, accident, and savings-linked life insurance products. The company places high value on its people, viewing employees as a key driver of its success, and aims to maintain a supportive workplace with a comfortable atmosphere and a strong spirit of collaboration.

Role Overview

SiCRED is looking for an Information Security Manager to strengthen its cybersecurity posture and support ongoing security, compliance, and resilience activities.

Key Duties

• Continuously oversee security platforms and tools such as firewall, EDR/XDR, IDS/IPS, SIEM, WAF, VPN, and email security solutions.
• Carry out scheduled vulnerability assessments and track the execution of corrective actions.
• Take part in penetration testing exercises and follow up on the implementation of remediation recommendations.
• Support internal and external audits related to information security.
• Identify, document, and monitor cyber risks affecting company systems.
• Contribute to the creation and testing of Business Continuity and Disaster Recovery plans.
• Review logs and investigate suspicious activity on critical systems.
• Assist with security assessments for vendors and other third parties.
• Support the implementation and maintenance of an ISMS aligned with ISO 27001.
• Help prepare reports and supporting documentation for AKSK, AMF, and auditors.
• Support awareness initiatives and employee training on cybersecurity topics.
• Participate in security incident analysis and the preservation of technical evidence.
• Work closely with IT teams, vendors, and external parties to resolve security issues.

Qualifications and Requirements

• Completed higher education in Information Technology, Computer Engineering, Economic Informatics, or a related field.
• A Master’s degree in Information and Communication Technology, Information Security, Cybersecurity, or a similar field is preferred; for other computing-related backgrounds, a Master’s degree is required.
• At least 5 years of experience in Information Technology, including no less than 1–2 years in information security or cybersecurity roles; 5 years is preferred.
• Experience in the financial sector, insurance, or other regulated environments is considered an advantage.
• Certifications such as CompTIA Security+, ISO/IEC 27001 Foundation, ISO/IEC 27001 Internal Auditor, CEH, Cisco CyberOps, Fortinet NSE, Microsoft Security, Palo Alto PCNSA, or equivalent credentials are an advantage.
• Strong verbal and written communication skills.
• Well-developed organization, documentation, and reporting abilities.
• Ability to work effectively in a team and under pressure.
• Good English proficiency at a professional and technical communication level.

Benefits

• Private life insurance
• Private health insurance
• Private savings-linked life insurance
• Private pension fund
• One annual staff trip
• Training opportunities

Working Conditions

This is a full-time on-site role based at SiCRED’s headquarters in Tirana. Working hours are 08:00–17:00.

Application Deadline

Applications are accepted until 15 July 2026.

Application Methods

Interested candidates may submit their application by post to Shoqëria e Sigurimit të Jetës SiCRED sh.a., Njësia Bashkiake Nr.5, Rr. “Brigada VIII”, Vila Nr. 3/1, Tiranë, or by email to the addresses provided by the employer.

Additional Information

Only shortlisted candidates will be contacted.