VP Cyber Security Operations

ROLE OBJECTIVE

The Vice President Cyber Security Operations is accountable for leading Otech s cyber security operations and managed security services including the Security Operations Center SOC threat intelligence incident response and digital forensics vulnerability management security engineering cloud and platform security application security operations security automation and operational service assurance The role ensures resilient efficient scalable and commercially competitive services through disciplined operating models capable teams strategic partnerships automation and measurable performance The role develops and executes the Cyber Security Operations strategy in alignment with the cyber security strategy risk appetite policies standards and governance requirements The position is responsible for implementing controls producing operational compliance evidence remediating control gaps and escalating material cyber risks

RESPONSIBILITIES

Day-to-day Leadership amp Operating Model Day-to-day leadership and management of the Cyber Security functional area and its respective teams Develop and implement an operating model with its underpinning processes and practices Define the target organization roles spans and layers capacity plan and sourcing strategy internal partner contract with Omanization milestones Establish governance cadences weekly operations monthly Steering Committee quarterly business reviews with clear decision rights and escalation paths Strategy Service Catalogue amp Roadmap Set the cybersecurity operation strategy aligned to business needs risk appetite and regulatory expectations translate into a three-year roadmap with annual plans Maintain a service catalogue covering advisory and governance Security Operations Center and managed services application and product security cloud and platform security incident response and forensics and security testing and update the catalogue periodically Build reusable accelerators and knowledge assets runbooks reference architectures automation playbooks ensuring they are delivered in editable source formats Risk Management Architecture amp Controls Create actionable insights and understanding through the analysis of both quantitative and qualitative data building recommendations that directly address the Cybersecurity business objectives Create and maintain a comprehensive protection plan for systems networks and data assess and manage information technology risks across the organization identify threats vulnerabilities business impact and mitigation strategies Develop and maintain security standards guidance and playbooks Own security architecture baselines identity-first security identity and access privileged access network segmentation data protection and loss prevention endpoint detection and response cloud-native application protection and configuration posture secure development lifecycle code analysis dependency hygiene and security automation Threat Intelligence Testing amp Assurance Develop a qualitative and quantitative analysis program for Cyber threat amp Brand intelligence identify adversary motives targets and intentions maintain and evaluate intelligence sources to improve effectiveness Conduct a regular security testing regime including technical audit vulnerability management and vulnerability assessment and penetration testing track remediation to closure Lead incident management post-incident reviews and crisis simulations implement lessons learned to reduce recurrence Compliance Policy amp Governance Establish governance frameworks and policies collaborate with legal and regulatory teams to meet regulatory and statutory standards Maintain ISO IEC 27001 and align to the designated Cybersecurity Framework oversee software supply-chain security data protection and privacy requirements including data residency and third-party risk management Define and report key performance indicators for example mean time to detect respond age of critical vulnerabilities service level attainment customer satisfaction through executive dashboards Strategic partner management Act as overall program manager for Otech for strategic partners with partners across various phases owning scope deliverables quality gates and acceptance criteria Ensure knowledge and intellectual property transfer runbooks automation infrastructure-as-code dashboards and Omanization progression Enforce exclusivity and go-to-market rules that maintain Otech s control of client relationships while leveraging partner technical capacity

Qualification

Bachelor s degree in computer science (CS), Information System Management (ISM), Information Technology (IT) Master s degree preferred

Certification

Certified Information Systems Security Professional (CISSP) or Certified Information Systems Auditor (CISA) mandatory Certified Information Security Manager (CISM)/ Certified in Risk and Information Systems Control (CRISC), incid