Cybersecurity Section Head

• Lead and manage the Cybersecurity function, providing technical direction and guidance to the security team.

• Develop, implement, and continuously improve cybersecurity policies, procedures, standards, and security controls.

• Develop and maintain a comprehensive cybersecurity roadmap and security improvement plan aligned with business requirements.

• Monitor and manage security technologies including XDR/EDR, SIEM, Firewalls, IDS/IPS, Email Security, MFA, and Vulnerability Management solutions.

• Lead the monitoring, investigation, and response to security events and cybersecurity incidents.

• Establish and maintain effective Incident Response processes and procedures.

• Conduct regular vulnerability assessments, risk assessments, security reviews, and remediation follow-ups.

• Ensure secure configuration and hardening of servers, endpoints, network devices, applications, and cloud services.

• Manage Identity and Access Management (IAM), privileged access, MFA, and access control policies.

• Work closely with IT Infrastructure, Network, Systems, Applications, and IT Service Management teams to embed security throughout the IT environment.

• Lead cybersecurity requirements for new technologies, systems, applications, and infrastructure projects.

• Coordinate with external security vendors, managed security service providers, ISPs, and cybersecurity partners.

• Ensure cybersecurity controls and processes comply with applicable security standards, regulations, and internal policies.

• Support and continuously improve Business Continuity and Disaster Recovery security requirements.

• Conduct cybersecurity awareness programs and promote security best practices across the organization.

• Prepare and present cybersecurity KPIs, risk dashboards, incident reports, vulnerability reports, and management recommendations.

• Lead cybersecurity projects and initiatives from planning through implementation and continuous improvement.

• Monitor emerging cyber threats, vulnerabilities, attack techniques, and cybersecurity technologies and recommend appropriate security measures.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Electronics & Communications Engineering, or a related field.

• 3-7 years of overall cybersecurity experience, including at least 1 year in a senior, supervisory, or leadership role.

• Strong hands-on experience in enterprise cybersecurity operations and security infrastructure.

• Strong knowledge of:

  • Network & Endpoint Security

  • Firewalls & VPN

  • EDR / XDR

  • SIEM & Security Monitoring

  • Vulnerability Management

  • Identity & Access Management

  • MFA & Privileged Access Management

  • Incident Response

  • Security Hardening

  • Risk Management

  • Security Awareness

• Hands-on experience with security technologies such as Fortinet, Microsoft Security, EDR/XDR, SIEM, MFA, or equivalent solutions.

• Good knowledge of Microsoft 365, Active Directory, Azure / Entra ID, Windows Server, Networking, and Cloud Security.

• Good understanding of Linux and Docker security.

• Strong understanding of cybersecurity frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, and CIS Controls.

• Experience in developing security policies, procedures, controls, and risk management practices.

• Strong leadership, analytical, communication, and problem-solving skills.

• Ability to manage multiple security incidents, projects, risks, and priorities in a fast-paced environment.