Cybersecurity Manager – Enterprise Security

About the role

The Cybersecurity Manager leads the enterprise-wide security strategy, operations and governance across on‑premises and cloud environments. This senior position oversees a dedicated team protecting servers, networks, cloud platforms and databases while ensuring compliance with industry regulations.

Key responsibilities

• Develop and execute a cyber security roadmap aligned with business and regulatory requirements.
• Define and enforce security policies, standards and procedures for infrastructure, cloud services and applications.
• Manage the Security Operations Centre (SOC), including monitoring, threat detection, incident response and forensic investigations.
• Oversee vulnerability assessments, penetration testing, remediation plans and continuous security controls for servers, networks, Kubernetes clusters and databases.
• Conduct regular risk assessments, audits and third‑party risk evaluations to maintain ISO 27001, NIST, GDPR, HIPAA or other relevant compliance.
• Lead and mentor a team of analysts, engineers and responders, setting KPIs and fostering professional development.
• Manage security budgets, vendor relationships and ensure robust identity and access management, zero‑trust and encryption practices.

Required profile

• Bachelor’s degree in Cybersecurity, Information Technology or a related field (master’s preferred).
• Relevant certifications such as CISSP, CISM, CISA, CEH, CCSP or equivalent.
• Proven experience leading cyber security teams, SOC operations and enterprise‑wide risk management.
• Demonstrated ability to ensure compliance with standards like ISO 27001, NIST, GDPR or HIPAA.

Required skills

• Windows and Linux server administration
• Cloud platforms: AWS, Azure, Oracle Cloud
• Kubernetes orchestration
• Databases: Oracle, PostgreSQL, Microsoft SQL Server, MySQL, CouchDB
• SIEM, IDS/IPS solutions
• Vulnerability assessment and penetration testing tools
• Identity and Access Management (IAM) and zero‑trust architecture
• Encryption, backup and recovery technologies
• Incident response and forensic investigation