ENVIRONMENT:

JOIN the team of a growing Retail Group seeking its next Cybersecurity Operations Manager to help in its mission to build and develop a high-performing Cybersecurity function in support of a complex business undergoing digital transformation. The objective is to continue building and enhancing the function with a strong focus on people development while leveraging modern technology solutions and specialist third parties to continually improve security posture. This is a leadership role which requires demonstrable experience in strategy and delivery of Cybersecurity operations. Experience in modern SecOps environments is required along with 12 years relevant work experience in the Cyber & Information Security discipline including 6 years in a leadership role with practical experience with the MITRE ATT&CK framework and working knowledge of PCI-DSS.

DUTIES:

People -

• Enhance cyber intellectual capital: Leadership and management of the Cybersecurity team covering talent development and performance management.
• Build culture and teaming: Management of internal partnerships for execution, including context setting, skills transfer, and up-skilling.
• Management of key external security partner and service relationships.

Process -

• Work with the CISO and other key stakeholders to define and drive a threat-informed and risk-based Cybersecurity strategy.
• Take responsibility for security operations covering offence and defence, incident response, and threat intelligence.
• Contribute to the ongoing improvement of Cybersecurity operations, processes and ways of working.
• Translate strategic security requirements into practical solutions and drive implementation.
• Contribute to the ongoing maintenance and enhancement of Cyber and Information Security Policies, Standards, Procedures and Guidelines.
• Remain aware of global security industry trends and influence the strategy accordingly.
• Manage forecasts and budgets.

Customer -

• Understand Cyber, IT and Business strategies and contribute to the creation and delivery of annual Cybersecurity roadmap and execution.
• Plan and prioritize projects and workload to deliver to the roadmap.
• Provide updates, context and feedback to relevant stakeholders.

REQUIREMENTS:

• 12 Years relevant experience in the Cyber and Information Security discipline.
• 6 Years experience in people leadership.
• Practical experience with the MITRE ATT&CK framework.
• Working knowledge of PCI-DSS.
• Demonstrable experience in leading a specialised team within a large environment.
• Experience with security frameworks, practices, technologies, and processes.
• Resiliency, determination, and pragmatism.
• May be required to assist outside of working hours.

Advantageous -

• Post-graduate Degree and industry Certifications.
• 3-Year IT qualification.
• Previous hands-on technical security experience.

ATTRIBUTES:

Technical Acumen -

• Makes sound technical decisions based on understanding of what is commercially achievable within technological constraints.
• Evaluates the applicability of solutions with the ability to challenge and qualify its suitability for the business.
• Leverages research on technology-related concepts, trends and best practices to provide guidance on IT roadmap.
• Sets technical policies and procedures to support IT stability and success aligned to evolving technologies and methodologies.

Business & Commercial Acumen -<