Director of Cyber Security

Job Purpose

Strategy, Governance & Planning

• Develop cybersecurity policies, procedures, and controls and provide continuous improvement recommendations.
• Develop cybersecurity strategic and operational plans aligned with WTCO's strategy, vision, mission, and corporate objectives.
• Develop a cybersecurity budget and capitalize on cost reduction or performance improvement opportunities.
• Set cybersecurity KPIs and monitor progress toward WTCO strategic objectives.
• Fulfill ESG responsibilities and requirements in line with the strategy and ESG-related initiatives.
• Identify opportunities for continuous improvement of cybersecurity systems and practices considering leading practices, cost reduction, and productivity improvement.

Enterprise Security Leadership

• Develop the organization's overarching cybersecurity strategy by integrating GRC, Operations (OT & IT), and Architecture functions into a unified enterprise-wide protection framework.
• Oversee formulation, implementation, and continuous improvement of cybersecurity policies, standards, and governance models to ensure compliance with national (e.g., NCA) and international regulations.
• Approve strategic and operational plans from each cybersecurity function to ensure budget alignment, resource allocation efficiency, and strategic goal achievement.
• Direct the creation of enterprise-wide cybersecurity risk management programs to identify, assess, and mitigate security risks across digital and operational environments.
• Lead integration of security-by-design and Zero Trust Architecture principles into enterprise technology deployments, digital transformation initiatives, and critical infrastructure upgrades.
• Establish governance frameworks for AI/ML systems, emerging technologies, and OT/IT convergence to ensure ethical use, data integrity, and protection from adversarial attacks.

Architecture & Operations

• Guide design, validation, and implementation of secure architectures, cloud integrations, and network segmentation to strengthen defense-in-depth capabilities.
• Supervise the development and operation of the Security Operations Center (SOC) for real-time detection, incident containment, and response across OT and IT domains.
• Manage large-scale cyber incident investigations, root cause analysis, and post-incident governance to institutionalize lessons learned and prevent recurrence.
• Drive evaluation and adoption of advanced detection, monitoring, and analytics technologies to enhance threat intelligence, situational awareness, and proactive defense.
• Align cybersecurity priorities with business continuity and disaster recovery strategies to ensure resilience against ransomware, industrial sabotage, and operational disruptions.

Compliance, Risk & Stakeholders

• Approve vendor and third-party cybersecurity risk assessment processes to safeguard supply chain ecosystems and enforce contractual compliance.
• Oversee compliance with privacy, data protection, and ESG-related security requirements.
• Review and endorse KPIs, KRIs, and cybersecurity maturity indicators for executive reporting and strategic decision-making.
• Coordinate collaboration between cybersecurity, legal, procurement, and business units to streamline risk acceptance, impact assessments, and audit readiness.
• Represent the organization in cybersecurity regulatory and industry forums, influencing policy development and ensuring early adoption of best practices.
• Champion enterprise-wide cybersecurity awareness and training programs to foster a culture of security ownership and accountability.

Job Requirements

• Bachelor's degree in Computer Science or Information Technology.
• Master's degree in Cybersecurity or Management.

Key Communications