Manager Cyber Security

Key Responsibilities

• Lead and oversee the Cyber Threat and Vulnerability Management (CTVM) program across infrastructure applications cloud services and digital assets
• Coordinate vulnerability assessments penetration testing security reviews remediation tracking and risk reporting
• Maintain visibility of IT assets and ensure accurate hardware and software inventories
• Coordinate security assessments including cloud application AI and configuration security reviews
• Oversee security testing activities within DevSecOps pipelines including SAST DAST secret scanning and software composition analysis
• Monitor SOC EDR and MDR services to ensure timely detection escalation investigation and resolution of security events
• Lead cybersecurity incident response root cause analysis remediation and lessons-learned activities
• Maintain cybersecurity policies procedures operating models and incident response readiness
• Establish and monitor cybersecurity KPIs KRIs dashboards and management reports
• Identify security improvement opportunities and provide risk-based recommendations to management
• Collaborate with technical teams and stakeholders to strengthen cybersecurity controls compliance and enterprise-wide resilience

Person Specifications

• Bachelors degree in Information Security Computer Science IT or a related discipline
• 710 years of experience in cybersecurity particularly vulnerability management security assessments security monitoring and incident response
• Strong understanding of the end-to-end vulnerability management lifecycle including risk prioritisation patching and remediation
• Hands-on experience with security tools such as Nessus Burp Suite CrowdStrike EDR MDR and attack surface management solutions
• Knowledge of application security cloud security threat intelligence and adversary tactics techniques and procedures (TTPs)
• Familiarity with security frameworks and regulatory requirements including CIS Controls ISO 27001 BNM RMiT and CSA Cloud Controls Matrix
• Strong incident coordination risk assessment stakeholder management and reporting capabilities
• Excellent communication and analytical skills with the ability to engage technical and non-technical stakeholders
• CISM CRISC CEH OSCP or equivalent cybersecurity certifications are advantageous

Vendor submissions - 12 months