Senior Manager – Cybersecurity

Role Overview

The Senior Manager – Cybersecurity is responsible for leading and managing the organization’s cybersecurity operations, ensuring the protection of information assets, systems, and infrastructure. This role focuses on implementing security strategies, managing risks, strengthening controls, and maintaining compliance with regulatory and industry standards.

Key Responsibilities

1. Security Strategy Execution

• Support the development and execution of the organization’s cybersecurity strategy and roadmap.
• Implement security policies, standards, and procedures aligned with organizational and regulatory requirements.
• Ensure alignment between cybersecurity initiatives and business and IT objectives.

2. Security Operations & Monitoring

• Oversee day-to-day cybersecurity operations, including monitoring, detection, and response activities.
• Manage security tools and technologies such as SIEM, endpoint protection, and network security systems.
• Identify vulnerabilities and ensure timely remediation to minimize risk exposure.

3. Incident Response & Threat Management

• Lead incident response activities, including investigation, containment, and recovery.
• Establish and maintain processes for threat detection, escalation, and resolution.
• Collaborate with internal and external stakeholders to manage cybersecurity incidents effectively.

4. Risk Management & Compliance

• Conduct risk assessments and security reviews to identify and prioritize risks.
• Ensure adherence to relevant compliance requirements and frameworks (e.g., NIST, ISO 27001, GDPR).
• Support audit activities and ensure remediation of identified findings.

5. Security Architecture & Implementation

• Contribute to the design and implementation of secure systems, applications, and infrastructure.
• Ensure security is embedded into system development, integration, and cloud environments.
• Enhance security controls to address evolving threats and vulnerabilities.

6. Business Continuity & Resilience

• Support the development and maintenance of disaster recovery (DR) and business continuity (BCP) plans.
• Conduct regular testing and ensure readiness for potential disruptions.

7. Stakeholder & Vendor Management

• Collaborate with IT, business units, and external partners to ensure secure implementation of systems and processes.
• Assess third-party vendors and manage associated cybersecurity risks.
• Provide guidance and awareness on security best practices across the organization.

8. Team Leadership & Development

• Manage and mentor cybersecurity team members, ensuring effective performance and development.
• Promote a strong security culture through training and awareness initiatives.
• Support capability building within the cybersecurity function.

9. Performance Monitoring & Improvement

• Track and report on cybersecurity metrics and KPIs.
• Continuously improve security controls, processes, and response capabilities.
• Stay updated on emerging threats, tools, and industry best practices.

Qualifications & Experience

• Bachelor’s degree in Information Technology, Cybersecurity, or a related field.
• 8–12 years of experience in cybersecurity, with demonstrated leadership responsibilities.
• Experience in security operations, risk management, and compliance.
• Proven ability to manage cybersecurity initiatives within complex IT environments.

Technical Skills & Competencies

• Strong knowledge of cybersecurity frameworks and standards (NIST, ISO 27001, etc.).
• Experience with:
  • Security monitoring and SIEM tools
  • Endpoint and network security solutions
  • Cloud security controls
  • Vulnerability management tools
• Understanding of incident response processes and threat management.

Core Competencies

• Analytical thinking and problem-solving
• Stakeholder engagement and communication
• Team leadership and collaboration
• Risk awareness and decision-making
• Ability to operate effectively under pressure

Preferred Certifications

• CISSP, CISM, CISA, or equivalent certifications
• Additional certifications in cloud security or ethical hacking are a plus