Cyber Security Manager

About the Role

The Cybersecurity Manager oversees the organisation’s cybersecurity initiatives, ensuring that all digital assets are protected from cyber threats. This role requires an understanding of cybersecurity frameworks, threat landscape, and the ability to work with external security professionals. The Cybersecurity Manager will work closely with other departments to implement policies, conduct risk assessments, and respond to security breaches. Within your role, you will have the opportunity to:

Develop and Implement Security Policies:

• Create and enforce cybersecurity policies, standards, and procedures.
• Ensure compliance with industry standards and regulatory requirements (e.g., GDPR, HIPAA).
• Regularly update security protocols to address emerging threats.

Risk Management and Assessment:

• Conduct regular risk assessments and vulnerability analysis.
• Identify potential security risks and develop mitigation strategies.
• Collaborate with other departments to ensure that risk management processes are integrated across the organisation.

Incident Response Management:

• Develop, implement, and manage incident response protocols.
• Lead the response to cybersecurity incidents, including investigation, containment, recovery, and reporting.
• Conduct post-incident analysis to improve security posture.

Security Operations Oversight:

• Oversee daily security operations, including monitoring, threat detection, and response activities.
• Manage security tools and technologies, such as firewalls, intrusion detection systems (IDS), and managed detection and response (MDR) systems.
• Ensure continuous monitoring and logging of all relevant activities across the network.

Team Leadership and Development:

• Manage an external team of cybersecurity professionals.
• Provide ongoing training and development opportunities for team members.
• Foster a culture of security awareness across the organisation.

Compliance and Audit:

• Ensure that the organisation meets all regulatory and compliance requirements.
• Prepare for and manage internal and external audits related to cybersecurity.
• Maintain documentation and evidence of compliance efforts.

Vendor and Third-Party Management:

• Evaluate, select, and manage relationships with cybersecurity vendors and service providers.
• Conduct security assessments of third-party vendors and partners.
• Negotiate contracts and service-level agreements (SLAs) with vendors.

Strategic Planning and Budgeting:

• Develop and manage the cybersecurity budget with the Global Head of IT.
• Contribute to the strategic planning of IT and cybersecurity initiatives.
• Stay updated on the latest trends and advancements in cybersecurity to inform decision-making.

Security Awareness and Training:

• Develop and deliver cybersecurity awareness programs for employees.
• Ensure that all employees understand and adhere to cybersecurity policies and best practices.
• Promote a culture of cybersecurity within the organisation.

Collaboration with Other Departments:

• Work closely with IT, legal, HR, and other departments to align cybersecurity initiatives with business goals.
• Provide cybersecurity expertise and support for other projects and initiatives.

About You

You will be a dedicated individual with good communication skills. As you will be supporting a large team, you will be required to prioritise and manage many open cases at once, so you must have strong organisational skills including attention to detail and multitasking abilities.

The following attributes would also be advantageous:

• CISSP certified
• Strong understanding of cybersecurity frameworks (e.g., NIST, ISO 27001).
• Proficient knowledge and understanding of security technologies and tools (e.g., SIEM, IDS/IPS, firewalls).
• Excellent leadership, communication, and problem-solving skills.
• Ability to manage multiple projects and prioritize tasks effectively.