Senior Manager Cybersecurity

Duties

Strategic Oversight

• Define and drive the overall cybersecurity strategy across GRC, Operations, and Data Protection functions.
• Ensure alignment between cybersecurity initiatives and business objectives.

Governance, Risk & Compliance (GRC)

• Oversee development and continuous improvement of cybersecurity policies and procedures aligned with NCA, ISO 27001, and NIST.
• Ensure enterprise-wide risk management practices including risk assessments, risk registers, and treatment plans.
• Monitor compliance posture and report cybersecurity KPIs and risks to executive management
• .

Cybersecurity Operations

• Oversee cybersecurity operations including SOC, incident response, vulnerability management, and threat intelligence.
• Ensure effective detection, response, and recovery capabilities (MTTD, MTTR).
• Direct handling of major incidents and ensure proper escalation and reporting to NCA
• .

Data Protection & Privacy (NDMO & PDPL)

• Ensure compliance with NDMO Data Governance and PDPL regulations.
• Oversee implementation of data classification, data protection, and data lifecycle management.
• Ensure mechanisms for consent management, Data Subject Rights (DSR), and data retention
• policies are implemented.

Cross-Functional Integration

• Ensure alignment and integration between GRC, Operations, and Data functions.
• Embed cybersecurity and data protection requirements into business processes, procurement, and digital initiatives (Secure by Design).

Third-Party & Supply Chain Security

• Oversee third-party risk management ensuring vendor compliance with NCA and data protection regulations.

Audit & Assurance

• Lead internal and external audits across cybersecurity and data protection domains.
• Ensure timely remediation of findings and compliance gaps.

Business Continuity & Resilience

• Ensure cybersecurity strategies and controls are fully integrated with the organization s Business Continuity Planning (BCP).

Leadership & Resource Management

• Lead and manage the three cybersecurity managers (GRC, Operations, Data).
• Ensure effective resource allocation, performance management, and team development.

Awareness & Culture

• Govern organization-wide cybersecurity and data privacy awareness programs.