Senior Cybersecurity Officer

About the role

The Cybersecurity Officer oversees the organization's cybersecurity posture, protecting systems, networks, applications and data from cyber threats. The role combines governance, risk management and compliance oversight with hands-on technical expertise, and turns cyber risks into business language while meeting regulatory and contractual obligations.

Key responsibilities

• Develop and maintain the cybersecurity strategy, policies and standards, and report security posture, risks and metrics to leadership
• Lead enterprise risk assessments, maintain the risk register and conduct business impact analyses
• Ensure compliance with ISO 27001, NIST CSF, SOC 2, GDPR, HIPAA, PCI-DSS and SOX, and coordinate audits and certifications
• Deliver security awareness training, phishing simulations and role-specific training
• Design and maintain security infrastructure (firewalls, IDS/IPS, SIEM, EDR/XDR, DLP, zero trust) across cloud, on-premises and hybrid environments (AWS, Azure, G42)
• Operate SIEM platforms, build detection rules, hunt threats and investigate incidents
• Manage vulnerability assessments, penetration testing, patch management and remediation tracking
• Participate in incident response, perform digital forensics and maintain incident response playbooks
• Implement IAM (SSO, MFA, PAM, RBAC) and secure applications, APIs, cloud workloads and containers
• Automate security tasks with Python, PowerShell and Bash, and integrate tools with SIEM, SOAR and ticketing systems

Required profile

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology or a related field (Master's preferred)
• 5-10 years of experience in cybersecurity, information security, risk or compliance roles
• Experience with GRC programs and frameworks, and with cloud and containerized workloads
• Certifications such as CISSP, CEH, GCIH, GCIA, OSCP, GPEN, AWS/Azure security specialties, and GIAC, CompTIA Security+ or CySA+

Required skills

• Security frameworks (ISO 27001, NIST CSF, CIS Controls, COBIT) and regulations (GDPR, HIPAA, PCI-DSS, SOX, CCPA)
• Proficiency with SIEM, SOAR, EDR and vulnerability management platforms
• Scripting with Python, PowerShell and Bash
• Strong communication and analytical skills