Head of Cybersecurity

Role Overview

The Head of Cybersecurity is responsible for leading and enhancing enterprise cybersecurity services within a shared services or multi-business environment. This role oversees security operations engineering governance and incident response initiatives to strengthen the organizations overall security posture across infrastructure networks cloud environments and operational platforms.

Reporting to the Head of Technology Services this position requires extensive experience in managed security services enterprise cybersecurity operations and regional stakeholder management. The role also involves driving service maturity improving operational processes and leading cybersecurity teams supporting multiple business units.

Key Responsibilities

Security Architecture & Strategy

• Lead the development and enhancement of cybersecurity services supporting enterprise systems networks and cloud environments.
• Design and implement security architecture frameworks aligned with business and operational requirements.
• Develop risk and threat assessment methodologies to identify security gaps and define remediation strategies.
• Drive the implementation and improvement of security controls across infrastructure and cloud platforms.

Security Engineering & Tooling

• Oversee deployment configuration and operational management of cybersecurity technologies such as SIEM SOAR endpoint protection identity and access management vulnerability management and cloud security tools.
• Enhance operational processes to improve detection accuracy system reliability and response effectiveness.
• Ensure security monitoring threat intelligence and operational workflows are integrated effectively across services.
• Lead operational engineering activities including alert triage support rule tuning system health monitoring and troubleshooting.
• Maintain security documentation operational procedures playbooks and technical standards.
• Customize operational security processes to align with varying business and technology environments.

Security Operations & Incident Response

• Lead and coordinate incident response activities including investigation containment eradication and recovery efforts.
• Support continuous improvement of incident response processes and testing activities.
• Conduct post-incident reviews and ensure corrective actions are implemented to reduce recurrence risks.
• Collaborate with technical teams and stakeholders to ensure timely and effective security operations support.

Governance Risk & Compliance

• Develop and enhance cybersecurity risk assessment frameworks and governance processes.
• Strengthen vendor and third-party security assessment capabilities.
• Support security awareness and compliance initiatives across the organization.
• Develop metrics and reporting mechanisms to provide visibility into cybersecurity posture and operational effectiveness for leadership stakeholders.
• Ensure alignment with industry standards compliance requirements and security frameworks.

Leadership & Service Management

• Partner with business and technology leaders to align cybersecurity services with organizational needs and strategic priorities.
• Lead and develop teams responsible for delivering managed security services and operational support.
• Drive continuous improvement of cybersecurity capabilities service maturity and operational efficiency.
• Manage operational planning resource allocation and service performance across cybersecurity functions.

Qualifications

Required

• Bachelors degree in Cybersecurity Information Technology Computer Science or a related field.
• Minimum of 10 years of experience in information security including operational engineering and governance responsibilities.
• Strong hands-on experience implementing and managing security controls across enterprise infrastructure and cloud platforms.
• Experience managing cybersecurity operations within managed services and/or enterprise environments.
• Expertise in security tooling detection engineering monitoring and incident response processes.
• Experience reviewing and managing network security controls firewall policies and access management practices.
• Familiarity with automation and scripting for security operations improvement (e.g. Python PowerShell).
• Strong knowledge of security frameworks and standards such as NIST ISO 27001 CIS Controls and MITRE ATT&CK.
• Strong documentation stakeholder management and communication skills.
• Experience working within regional or global operational environments.

Preferred

• Professional certifications such as CISSP CISM CCSP GIAC or equivalent.
• Cloud security certifications related to Azure AWS or Google Cloud platforms.

Key Competencies

• Cybersecurity leadership and strategy
• Security architecture and engineering
• Incident response and threat management
• Governance risk and compliance oversight
• Stakeholder and team management
• Operational excellence and continuous improvement
• Analytical thinking and problem-solving