Cyber Security Lead

Role Title

Cyber Security Function Lead

Department

IT Operations – Cyber Security

Reports To

Head of IT Operations

Location

Max‑Q

Role Purpose

• The Cyber Security Function Lead is responsible for planning,
• implementing, and governing the organization’s cybersecurity strategy. This
• role ensures the confidentiality, integrity, and availability of
• information systems by managing security operations, risk, compliance, incident
• response, and continuous improvement of security controls across
• infrastructure, applications, cloud, and endpoints.

Key Responsibilities

• Cyber Security Strategy & Governance

Define

and implement the cybersecurity roadmap aligned with business

objectives.

Establish

and maintain security policies, standards, and procedures.

Ensure

alignment with industry frameworks (ISO 27001, NIST, CIS Controls).

Act

as the primary point of contact for security governance and audits.

• Security Operations Management

Oversee Security Operations (SOC) activities, including monitoring and

alert handling.

Ensure

effective use of SIEM, syslog, EDR/XDR, DLP, and monitoring tools.

Review

and analyze security logs, alerts, and incidents.

Ensure

timely escalation and resolution of security issues.

• Incident Response & Threat Management

• Lead incident response activities, including containment, eradication,
• and recovery.
• Coordinate root cause analysis (RCA) and post‑incident reviews.

Ensure

maintenance of incident response plans and conduct periodic drills.

Track

and mitigate emerging cyber threats and vulnerabilities.

• Risk, Compliance & Audit

• Identify,
• assess, and manage cybersecurity risks.
• Support internal and external audits, including VPN, network, and
• application audits.

Ensure

compliance with regulatory and contractual security requirements.

Maintain

audit evidence, reports, and corrective action plans.

• Identity, Access & Data Security

• Govern Identity and Access Management (IAM) processes.
• Ensure least privilege access, MFA, and privileged access controls.
• Oversee data protection controls, including encryption and DLP.

Review

and approve administrative access based on business justification.

• Infrastructure & Network Security

Ensure

secure design and implementation of network, cloud, and hybrid

environments.

Review

firewall policies, VPN configurations, and network segmentation.

Coordinate

with Infrastructure and Networking teams to eliminate security gaps.

• Team Leadership & Coordination

Lead

and mentor Cyber Security team members.

Assign

tasks with clear ownership, tracking, and reporting.

Coordinate

with IT Administration, Networking, and other stakeholders.

Ensure

timely reporting to management with daily/weekly status updates.

• Documentation & Reporting

Maintain

detailed security reports, dashboards, and checklists.

Ensure email and ticket‑based communication for all security actions.

Provide

regular management updates on security posture, risks, and

improvements.

Key Accountabilities

Zero

untracked or undocumented security actions.

No

critical or high‑risk audit gaps.

Timely

closure of security incidents and vulnerabilities.

Consistent

security reporting and evidence availability.

Continuous

improvement of the organization’s security posture.

Required Skills & Competencies

Technical Skills

Network

• and infrastructure security
• SIEM,
• SOC operations, and incident response

Cloud

security (Azure/AWS)

IAM,

EDR/XDR, DLP

Vulnerability

management and security monitoring

Professional Skills

Strong

leadership and decision‑making

Risk

management and analytical thinking

Excellent

documentation and reporting

Stakeholder

and audit communication

Qualifications & Experience

Bachelor’s

degree in IT, Cyber Security, or related field

5–8+

years of experience in Cyber Security

Relevant

certifications (CISSP, CISM, CEH, Security+, Azure/AWS Security) preferred