Cybersecurity Engineering Manager

Role Overview

The Lead Security Engineering Manager is pivotal in designing, deploying, and overseeing critical information security solutions that protect the organization's systems and data assets. This role requires close collaboration with various stakeholders including Security Operations, Governance, Risk & Compliance teams, Technology departments, Third Party Risk Management, and Legal.

Key Responsibilities

• Design and implement Information Security tools that comply with company security policies, regulatory mandates, and international standards such as NIST and ISO 27001.
• Secure approvals for security architectures and designs by engaging in governance forums and coordinating with relevant stakeholders.
• Maintain and optimize Information Security platforms for effective control enforcement and full feature utilization.
• Handle comprehensive platform management tasks encompassing configuration, incident and change management, and problem resolution aligned with defined SLAs.
• Support excellence in security operations activities including privileged access management, vulnerability tracking, key risk indicator reporting, audit coordination, compliance enforcement, and service request handling.
• Monitor service performance to ensure the security engineering function consistently meets quality and SLA benchmarks.
• Implement continuous oversight of security tools with proactive risk identification and remediation aligned to the corporate risk framework.
• Create and maintain security performance metrics and dashboards to provide senior leadership clear insights into control effectiveness, platform condition, and risk status.
• Promote continuous enhancements by integrating automation and AI technologies to improve efficiency, scalability, and maturity of operations.
• Review and provide security governance for architectural decisions to ensure adherence to security policies and regulatory requirements.
• Lead, mentor, and develop the Security Engineering team to foster a high-performing culture attuned to evolving security challenges.
• Manage vendor and partner relationships to maximize tool usage, service quality, and compliance with contractual obligations.
• Participate in budget planning and cost management to ensure prudent use of security resources.
• Offer leadership support during significant security incidents, facilitating timely responses and post-incident improvements.
• Contribute to the creation and execution of the Security Engineering strategic plan aligned with organizational goals and regulatory expectations.
• Develop and maintain thorough security engineering standards, processes, and documentation to ensure consistency and compliance.

Candidate Requirements

• Possess at least 15 years of cumulative experience in cybersecurity, encompassing network security, information security, and data protection within complex enterprise environments.
• Hands-on expertise with security technologies such as Privileged Access Management (PAM), Security Information and Event Management (SIEM), Security Orchestration Automation and Response (SOAR), Endpoint Detection and Response (EDR)/Extended Detection and Response (XDR), Network Detection and Response (NDR), Intrusion Prevention and Detection Systems (IPS/IDS), Data Loss Prevention (DLP), Web Application Firewalls (WAF), and Vulnerability Management tools.
• Track record in deploying and managing information security management systems (ISMS), specifically ISO 27001, and compliance with standards like SOC 2 Type II.
• Deep understanding of security frameworks, enterprise risk management, and regulatory compliance, especially within banking or similarly regulated sectors.
• Exceptional ability to communicate effectively and influence senior management through presentations and documentation.
• Demonstrated leadership skills with experience managing high-performing teams, ensuring excellent operational delivery within SLAs.
• Experience overseeing security operations and engineering, including handling incident response, risk mitigation, and ongoing service improvements.
• Acquaintance with automation and AI-based security solutions aimed at boosting operational effectiveness and maturity.
• Experience with vendor and third-party security management, including management of tool providers and contractual compliance.
• Relevant certifications such as CISSP, CISM, CISA, CRISC, or equivalents are required.