Cybersecurity Section Head

Lead and oversee all cybersecurity initiatives within the organization and externally for clients and projects. Ensure compliance with national and international regulations (CST-CRF, NCA, ISO 27001, GDPR), protect digital assets, and deliver expert-level cybersecurity services for internal environments and external enterprise / government clients.

Key Responsibilities

Cybersecurity Governance & Compliance

Develop, implement, and enforce cybersecurity policies and risk frameworks.

Ensure full compliance with :

CST Cybersecurity Regulatory Framework (CRF)

National Cybersecurity Authority (NCA) regulations

ISO 27001, GDPR, and industry-specific mandates

Lead internal and external cybersecurity audits and ensure continuous audit-readiness.

Risk Management & Security Assessments

Conduct vulnerability assessments (VAPT), risk analyses, and threat modeling.

Oversee internal and external penetration testing programs.

Produce risk reports with clear mitigation strategies.

Security Operations Management (SOC)

Supervise day-to-day SOC activities and lead threat detection and incident response.

Manage SIEM & SOAR platforms (e.g., Splunk, QRadar, Rapid7 InsightIDR).

Lead cyber incident handling, forensic investigations, and post-incident reviews.

Oversee security implementations across hybrid and multi-cloud environments (AWS, Azure, Oracle).

Ensure infrastructure hardening, secure configurations, and access controls.

Collaborate with DevOps teams to embed security (DevSecOps) in development pipelines.

External Cybersecurity Services (Projects & Clients)

Provide cybersecurity expertise to external digital transformation and compliance projects.

Guide clients in meeting regulatory and operational security requirements.

Lead delivery of security assessments, gap analysis, risk mitigation, and advisory.

Security Awareness & Training

Design and manage awareness campaigns (via KnowBe4 or similar platforms).

Conduct training sessions for employees, clients, and executives.

Promote a cybersecurity-first culture both internally and externally.

Qualifications & Skills

Experience :

Minimum 9 years in cybersecurity (including hands-on with Palo Alto and Fortinet and more ).

At least 3 years in a leadership or team lead capacity.

Strong experience in delivering cybersecurity for enterprise and government projects.

Certifications (Preferred) :

CISSP, CISM

PCNSE (Palo Alto Certified)

Fortinet NSE 4 / 5 / 6 / 7

CEH, ISO 27001 Lead Implementer

AWS or Azure Security Specialty

Education :

Bachelor’s in Cybersecurity, Computer Science, Network Engineering, or related field.

#J-18808-Ljbffr