Manager - Cybersecurity

Job purpose

Strategy and governance

• Develop and implement a cybersecurity roadmap aligned with business and regulatory requirements.
• Establish security policies, standards, and procedures across infrastructure, cloud, and application environments.
• Collaborate with infrastructure leaders to embed security into system and network architecture.
• Manage security budgets, vendor relationships, and third-party risk assessments.
• Ensure compliance with ISO 27001, NIST, GDPR, HIPAA, and applicable local regulations.

Operational security

• Oversee SOC monitoring, threat detection, and incident response activities.
• Manage vulnerability assessments, penetration testing, and remediation plans.
• Implement and maintain security controls for servers, networks, cloud services, Kubernetes, and databases.
• Lead incident response and forensic investigations with timely resolution and root cause analysis.
• Ensure strong identity and access management, privilege escalation controls, and zero-trust practices.

Risk and assurance

• Conduct regular risk assessments and security audits across IT infrastructure and applications.
• Manage endpoint protection, intrusion detection and prevention, and SIEM platforms.
• Drive security awareness and training programs across the organization.
• Oversee data protection, encryption standards, and backup and recovery procedures.

Team leadership

• Lead and mentor cybersecurity analysts, engineers, and incident responders.
• Define KPIs and success metrics for cyber defense and resilience.
• Provide continuous skill development to address evolving threats and technologies.
• Provide direction, coaching, and career development guidance to team members.
• Maintain an engaged, committed, and performance-driven team in line with company procedures.

Qualifications and experience

• Bachelor’s degree in cybersecurity, Information Technology, or a related field; a master’s degree is preferred.
• CISSP, CISM, CISA, CEH, CCSP, or an equivalent industry certification.
• Cloud security certification such as AWS Security Specialty, Azure Security Engineer, or Oracle Security.
• Kubernetes Security Specialist certification is a plus.
• Fluent English language skills.
• Strong background securing Windows and Linux servers, cloud environments, enterprise networks, and databases.
• 8+ years of IT security experience, including at least 3+ years in a managerial role.
• Hands-on Kubernetes security, container hardening, and cloud-native security experience.
• Proven experience leading incident response and crisis management.