Position Summary
The Head of Security Operations plays a critical role in managing and enhancing the cybersecurity posture of the organisation. This role involves leading a team of dedicated cybersecurity professionals, collaborate with cross-functional teams and drive operational excellence. This position reports directly to the Chief Information Security Officer (CISO).
The successful candidate will have experience running Cybersecurity operations, as well as experience as a SOC analyst. The candidate would be a strong leader that is able to provide leadership during a cybersecurity incident.
Key Responsibilities
1. Team Management and SOC Leadership
a. Lead and mentor the Security Operations Centre (SOC) team.
b. Oversee 24/7 monitoring, incident handling, and threat intelligence analysis.
c. Foster a culture of continuous learning and professional growth within the SOC team.
2. Operational Leadership
a. Work closely with the CISO in executing the overall cybersecurity strategy of the organisation.
b. Manage day-to-day cybersecurity operations, including incident response, vulnerability assessments and threat detection.
c. Manage cyber security vendors and ensure Service Level Agreements are met.
d. Adopt a Continuous Improvement mindset to constantly develop and enhance operational processes to improve efficiency and effectiveness.
e. Ensure that cyber security tools settings, configurations and rules are constantly reviewed for improvements in cybersecurity posture and in response with continuously evolving cyber threats.
3. Cybersecurity Incident Leadership
a. Lead and orchestrate the response to security incidents, including DOS attacks, data breaches, malware outbreaks and unauthorised access attempts.
b. Establish and maintain an effective incident response process, ensuring timely detection, containment, eradication and recovery.
c. Collaborate with various departments in the organisation to manage incident communication and reporting.
d. Work with relevant third parties to address cyber contagion risks.
e. Conduct post incident reviews to identify areas for improvement and implement corrective actions.
4. Risk Management and Compliance
a. Proactively address potential cyber threats and vulnerabilities by collaborating with Risk and Compliance department.
b. Conduct regular vulnerability assessments.
c. Ensure operational compliance with relevant regulations, policies, standards and procedures.
Requirements
- Degree in Computer Science, Computer Engineering or Information Security related fields.
- At least 10 years’ of overall working experience, minimum of 6 years’ of which in the cybersecurity industry, and minimum 3 years’ of which as a team manager.
- Experience as a SOC analyst is a must.
- Experience running cybersecurity operations and cybersecurity incident management is a must.
- Relevant certifications such as CISSP, CISM, GSOM, SSCP, CASP+, GCIH will be a significant advantage.
