Head of Cybersecurity / Security Engineering Manager

Our client is seeking an experienced Cybersecurity Manager to drive enterprise security strategy, operations, and engineering capabilities within a complex and highly regulated environment. This role will be responsible for strengthening security posture, leading security programs, managing security technologies, and partnering with senior stakeholders to ensure effective risk management, compliance, and operational resilience.

The ideal candidate will have extensive experience across cybersecurity, information security, network security, and data security, with a strong background in banking or regulated industries.

Key Responsibilities:

• Lead the development and execution of enterprise cybersecurity strategies, security programs, and technology roadmaps aligned with business objectives and regulatory requirements.

• Oversee security engineering and security operations capabilities, ensuring effective management of security platforms, processes, and services.

• Drive implementation and continuous improvement of security technologies, including:

• Privileged Access Management (PAM)

• Security Information and Event Management (SIEM)

• Security Orchestration, Automation and Response (SOAR)

• Endpoint Detection and Response / Extended Detection and Response (EDR/XDR)

• Network Detection and Response (NDR)

• Intrusion Prevention / Detection Systems (IPS/IDS)

• Data Loss Prevention (DLP)

• Web Application Firewall (WAF)

• Vulnerability Management platforms

• Establish and maintain security governance frameworks, policies, standards, and controls, including Information Security Management Systems (ISMS) and compliance requirements such as ISO 27001 and SOC 2 Type II.

• Manage cybersecurity risk assessments, remediation initiatives, incident response support, and continuous security improvement programs.

• Partner with senior leadership, technology teams, business stakeholders, auditors, and regulators to communicate security risks, recommendations, and strategic initiatives.

• Lead, mentor, and develop security engineering and operations teams, fostering a culture of accountability, operational excellence, and continuous improvement.

• Manage security vendors, technology partners, and third-party service providers, ensuring effective service delivery and contractual compliance.

• Explore and adopt automation and AI-driven security capabilities to improve operational efficiency, threat detection, and security maturity.

Requirements:

Cybersecurity Experience

• Minimum 15 years of experience in cybersecurity, information security, network security, or data security roles within complex enterprise environments.

• Strong experience designing, implementing, and operating enterprise security solutions and security programs.

• Proven experience managing security operations, engineering functions, incident response processes, and security improvement initiatives.

Security Technology Expertise

• Hands-on experience with enterprise security technologies, including:

• PAM

• SIEM / SOAR

• EDR/XDR

• NDR

• IPS/IDS

• DLP

• WAF

• Vulnerability Management solutions

• Strong understanding of security architecture, controls, threat management, and cybersecurity best practices.

Governance, Risk & Compliance

• Experience implementing and managing security frameworks such as:

• ISO 27001 / ISMS

• SOC 2 Type II

• Other enterprise security and regulatory frameworks

• Strong knowledge of cybersecurity risk management, regulatory compliance, and control governance, particularly within banking or highly regulated industries.

Leadership & Stakeholder Management

• Proven experience leading security teams and driving high-performing engineering or operations functions.

• Strong communication, presentation, and documentation skills with the ability to influence senior executives and key stakeholders.

• Experience managing security vendors, service providers, contracts, and third-party security engagements.

Preferred Certifications

• CISSP, CISM, CISA, CRISC, or other recognized cybersecurity certifications.

• Relevant cloud security, security architecture, or technology leadership certifications are advantageous.

Interested applicants, please contact Angelica at [Confidential Information] for a confidential discussion.

EA License no.: 16S8066 I Reg no.: R1110125

Only shortlisted applicants will be notified.