Head of Security Operations

A large, highly regulated organisation is looking for an experienced cybersecurity leader to oversee its security operations and strengthen its defensive capabilities.

The role combines technical security expertise, operational ownership and people leadership, with responsibility across security operations, infrastructure and cloud security, vulnerability management, IAM, incident response and security advisory.

Key Responsibilities:

• Lead cybersecurity operations covering threat detection and response, vulnerability management, security monitoring and incident management.
• Oversee infrastructure security across on-premises and cloud environments, including vulnerability management, server hardening, security monitoring and security architecture reviews.
• Maintain oversight of cloud security posture, assess new cloud solutions and ensure security gaps and misconfigurations are appropriately addressed.
• Provide leadership and oversight across Identity & Access Management (IAM) governance.
• Partner with the SOC on security monitoring, incident response and the implementation of new cybersecurity capabilities.
• Act as a trusted security advisor to Technology and Business stakeholders, providing practical recommendations that balance security, regulatory and business requirements.
• Lead and develop an established cybersecurity team, driving technical capability development and continuous improvement.

Requirements:

• 15+ years of information security experience, preferably within a highly regulated environment.
• Strong experience across security operations, infrastructure security and cloud security, with sufficient technical depth to engage and challenge engineering teams.
• Hands-on understanding of multi-cloud environments across SaaS, PaaS and IaaS, together with cyber incident management experience.
• Experience across vulnerability management, infrastructure hardening, security architecture/advisory and security assessments.
• Strong people leadership and senior stakeholder-management capabilities.
• Relevant certifications such as CISSP, CISA, CRISC, CCSP or cloud/security architecture certifications would be advantageous.

To apply:

If you're interested to apply or find out more, please share across your CV or reach out to Chen Yi at [Confidential Information] for a discussion. Due to anticipated high volume of applications, we regret to inform that only shortlisted candidates will be notified.

Reg: R1876389

Lic: 16S8060