Cyber Security Manager

Role overview

Administrative and supervisory duties

• Contribute to departmental strategic plans, operational goals, and KPIs and track performance.
• Improve team service quality, accuracy, and efficiency; recommend workflow improvements and ensure procedures are documented and followed.
• Evaluate staff performance, identify training needs, and monitor training effectiveness.
• Estimate resources, tools, and technologies; contribute to budget planning and monitor financial performance.
• Provide HR recommendations on staffing, promotions, transfers, and rewards; maintain communication and departmental records.

Cybersecurity duties

• Supervise cybersecurity policies, standards, and procedures aligned with national frameworks.
• Oversee infrastructure, systems, and applications to detect threats and breaches and coordinate remediation.
• Manage IAM and enforce the Principle of Least Privilege.
• Oversee penetration testing, cyber risk assessments, and mitigation planning.
• Lead incident response, including containment, root-cause analysis, and lessons learned.
• Promote cybersecurity awareness through ongoing employee training and campaigns.
• Monitor regulatory compliance and report on adherence.
• Coordinate with data and IT departments on data protection, business continuity, and disaster recovery.

Education and experience

• Bachelor's degree in Cybersecurity, Computer Science, Information Security, or a related field.
• Minimum five years of relevant cybersecurity experience.

Competencies

• Leadership competencies: planning and execution, decision-making, empowerment, monitoring and evaluation, motivation, and change management.
• Behavioral competencies: technical excellence, presentation, critical and analytical thinking, adaptability, communication, self-learning, accountability, teamwork, and professional writing.
• Innovative competencies: creative thinking, innovative problem solving, and institutional innovation.
• Technical competencies: risk assessment, network security, data encryption, cyber awareness, incident response, security policy development, and infrastructure hardening.