Key Accountabilities

• Develop and execute the organization's cybersecurity strategy to ensure the protection of systems, networks, and data from threats.
• Lead a team of cybersecurity professionals, providing guidance and support on technical and strategic issues.
• Perform risk assessments, vulnerability assessments, and threat modeling to identify potential risks and vulnerabilities in the network.
• Monitor network traffic and respond to security incidents promptly.
• Lead the response to cybersecurity incidents and breaches, ensuring that appropriate corrective actions are taken.
• Oversee incident documentation and report findings to upper management.
• Ensure the organization complies with cybersecurity laws, regulations, and best practices.
• Regularly review and update security policies, procedures, and protocols.
• Conduct security audits to ensure that security measures are effective and appropriate.
• Collaborate with IT teams and business units to ensure that security protocols align with business needs
• Provide cybersecurity training to staff members to foster a culture of security awareness.
• Regularly report on the status of cybersecurity initiatives to senior management and stakeholders.

Knowledge, Skills, and Experience

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field (Master’s degree preferred).
  
• CISSP (Certified Information Systems Security Professional) or CISM (Certified Information Security Manager) certification is highly desirable.
  
• Other relevant cybersecurity certifications such as CISA, CEH, or Comp TIA Security+ are a plus.
  
• Minimum 5 years of experience in cybersecurity or information security management.
  
• Proven experience in managing security operations, vulnerability management, incident response, and security audits.
  
• Experience with risk management, GRC (Governance, Risk, and Compliance) frameworks, and regulatory standards.
  
• Strong knowledge of network security, firewalls, IDS/IPS, encryption, and endpoint protection.
  
• Hands-on experience with SIEM (Security Information and Event Management) tools.
  
• Familiarity with cloud security principles and solutions.
  
• Strong understanding of regulatory requirements such as GDPR, HIPAA, and PCI-DSS.