SENIOR EXECUTIVE - INFORMATION TECHNOLOGY (CYBERSECURITY - OPERATION) (EG09)

Job Description

Job Purpose

Lead the security operations function by overseeing incident response, threat analysis, and operational readiness to guarantee the rapid detection, containment, and mitigation of cyber threats.

Drive the continuous enhancement of monitoring capabilities and provide strategic technical direction to safeguard organizational assets.

Responsibilities

1. Direct security operations and enforce standardized incident response procedures and escalation workflows across the organization.

2. Manage end-to-end incident response efforts, encompassing threat validation, impact assessment, containment coordination, and recovery oversight.

3. Engineer advanced detection rules, automated playbooks, and escalation frameworks to improve monitoring precision and speed.

4. Execute deep-dive threat analysis and digital forensics to identify root causes and implement definitive corrective actions.

5. Mentor junior analysts through technical guidance and skills development to maintain high operational consistency.

6. Synchronize defensive controls with IAM and governance teams to maintain cross-functional security alignment and compliance.

7. Architect security stack improvements by evaluating and integrating emerging technologies to close detection gaps.

8. Track and accelerate vulnerability remediation activities to mitigate identified risks within defined service level agreements.

9. Report incident metrics, risk intelligence, and strategic improvement plans to executive management and key stakeholders.

10. Execute specialized security operational tasks and tactical assignments as directed by senior leadership to address emerging threats.

Qualification and Experience

1. Bachelor’s Degree in IT, Cybersecurity, or related field (Master’s preferred).

2. Minimum 4 years of experience in Security Operations, incident response, and threat management.

3. Advanced expertise in SIEM/SOAR engineering, log correlation, and custom detection rule development.

4. Deep knowledge of incident response lifecycles, digital forensics, and frameworks like MITRE ATT-CK.

5. Technical proficiency in EDR/XDR, threat intelligence, scripting (Python/PowerShell), and cloud security (AWS/Azure).

6. Relevant certifications such as CompTIA CySA+, CEH, GCIH, or Splunk Certified Analyst preferred.