We are engaged by a global client to seek for a Head of Security Operations to oversee the Security Operations Center and Security Infrastructure department
Head of Security Operations
Responsibilities:
Strategic Leadership and Vision:
- Develop and execute an enterprise-wide security strategy and roadmap, incorporating full stack security requirements and gaining key stakeholder sponsorship. Security Operations Center
(SOC) Oversight 24/7/365 Security Operations Center:
- Ensuring continuous monitoring and effective incident response. Oversee the development of new detection rules and automation through SIEM and SOAR systems.
Threat and Vulnerability Management:
- Lead the Threat Management program, including threat intelligence research, threat hunting, and vulnerability management. Ensure a state of readiness to respond to threats and manage incidents.
Penetration Testing and Incident Handling:
- Conduct penetration testing, attack responses, and forensic investigations. Take the lead on security incidents and ensure robust investigations and corrective actions.
Security Infrastructure Management:
- Oversee the security infrastructure, focusing on hardening security measures across enterprise, test, and production environments
Compliance and Policy Development:
- Establish and maintain policies, procedures, standards, and guidelines that enable and support the security strategy. Conduct quarterly reviews and ensure compliance with ISMS and BCP executions.
Security Awareness and Training:
- Develop and manage the organization’s security awareness programs and phishing exercises. Provide security training to employees, third parties, suppliers, partners, and customers.
Collaboration and Communication:
- Collaborate with leaders in Platform Engineering, Edge, Product Management, and other departments to integrate and utilize complex security solutions. Communicate upcoming changes and security policies effectively across the organization.
Risk Management and Reporting:
- Proactively identify and register risks in the organization’s risk register. Monitor and report on cybersecurity threats, intelligence, and remediation plans to the CISO.
Organizational Influence and Change Leadership:
- Lead through influence within a matrixed organization, inspiring teams across functions and technical areas. Routinely contribute to organizational performance and embrace strategic changes.
Qualifications & Experience:
- 10+ years of progressive security leadership and management experience in multi-disciplinary environments
- Proven experience in cybersecurity operations management, preferably in a similar leadership role.
- Hands-on experience building and managing an information security program including
- security operations. This includes Threat Hunting, Threat Intelligence, and Red Teaming
- Hands-on technical experience demonstrating a willingness to get into the weeds and do the dirty work if necessary. Experience with cloud security, Vulnerability management, and compliance frameworks
- Strong knowledge of advanced digital forensics and incident response capability to address threats posed to IoT and cloud
- Advanced degree or relevant certifications (e.g., CISSP, CISM) preferred
Regret to inform that only shortlisted candidates will be notified.
www.dadaconsultants.com
EA Registration Number: R1878287
Business Registration Number: 201735941W.
Licence Number: 18S9037
