cyber security manager

Yatsudoki Chateraise

Job Purpose<ul><li>To establish and maintain a corporate-wide information cyber security management program and ensure that information assets are adequately protected.</li></ul>Primary Duties Performed<ul><li>Develop, implement and monitor a strategic, comprehensive enterprise information security and IT risk management program;</li><li>Work directly with the CTO and all IT functions to facilitate cyber security and risk assessment and its processes;</li><li>Evaluate the IT threat landscape to reduce risk, leading auditing, and compliance initiatives,</li><li>Assist in implementation of the IT Cyber Security strategies, policies and procedures;</li><li>Prepare the documentation for the IT Cyber Security reports and guidelines;</li><li>Develop and enhance an information security management framework;</li><li>Monitor, maintain and administrate the IT security devices (such as Firewalls, Cor Switches, Web filtering, Spam Filtering devices... etc.) in coordination with IT Infrastructure and Cloud Unit to ensure no threats impacting the operations of these devices.</li><li>Understand and interact with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems and services;</li><li>Partner with business stakeholders across INDEX Holding group to raise the awareness of Cyber Security risk management concerns by conducting the required training and workshops;</li><li>Assists with the overall business technology planning, providing a current knowledge and future vision of technology and systems.</li><li>Manage and maintain cyber security incident management and track accordingly;</li><li>Review the audit reports and assist to tackle the security issues raised by the auditors.</li><li>Conduct a periodic security check on all the relevant IT systems and services that are running in production.</li><li>Conduct a periodic penetration testing to the relevant technologies that are running in production.</li><li>Conduct a periodic vulnerability assessment to the relevant technologies that are running in production.</li><li>Perform a periodic check of the backup restoration practice in INDEX holding to ensure the consistency of the backup data and integration;</li><li>Assist in controlling IT related risk by advising management and functional units on all IT policies and procedures;</li><li>Ensure the confidentiality and protection of corporate data, proprietary information and intellectual property;</li><li>Check the updates on the systems to ensure the patch management with the latest patches and upgrades on a regular basis;</li><li>Assist in managing the crisis situations, involving complex technical hardware or software problems and ensure adequate provision for business continuity and disaster recovery;</li><li>Ensuring that INDEX Holding is adaptable to evolving cyber security compliance regulations.</li><li>Solicit, study and evaluate all IT Projects Plans to ensure risk low effectiveness, in addition, identify and develop risk analysis and supervise risk management for the IT department;</li><li>Undertake such other tasks as and when required by the Chief Technology Officer.</li></ul>3. ContactsInternal:<ul><li>Chief Technology Officer</li><li>All IT Team</li><li>All other employees of INDEX Holding</li></ul>External:<ul><li>IT Service Suppliers</li><li>IT Vendors</li></ul>4. Independence of Operation<ul><li>Data access, security and integration;</li><li>Reduction in IT related risks, business continuity and disaster recovery plans; and</li><li>Coordinate with the department employees to provide the necessary IT Security adviser to the Group employees.</li></ul>5. Qualifications and Experience Required<ul><li>Degree in IT related discipline Computer Science or equivalent and additional professional technical training/certifications in System Administration;</li><li>Master&rsquo;s Degree on IT or equivalent is preferred;</li><li>Certification in Cyber Security, Certified Ethical Hacker, and hands-on experience associated with risk management, Penetration Testing and Vulnerability Assessment;</li><li>Minimum 5 years of IT experience in IT Cyber Security, IT Systems and Networking Evaluation;</li><li>Demonstrate knowledge of security standards and their applications;</li><li>Exposure with the latest technology and research background will be an added advantage;</li><li>Good project management skills</li><li>Excellent communication skills in English, both written and oral. Arabic language is an advantage;</li><li>Excellent organizational and time management skills; and</li><li>Good interpersonal skills.</li></ul>Job Type: Full-timeApplication Question(s):<ul><li>What is your salary expectation in AED?</li><li>Have you worked on security technologies and applications related to Microsoft, Cisco, and AWS?</li><li>How many years of experience do you have in IT Security and Risk Management within the UAE?</li><li>Which certifications do you hold (CISSP, CEH, CISM, CISA)?</li><li>How many years of experience do you have in cybersecurity?</li></ul>Work Location: In person

Cyber Security Specialist

INDEX Integrated Platform Company

Job Purpose :To establish and maintain a corporate-wide information cyber security management program and ensure that information assets are adequately protected.Key Responsibilities :<ul><li>Develop, implement, and monitor a strategic, comprehensive enterprise information security and IT risk management program;</li><li>Work directly with the CTO and all IT functions to facilitate cyber security and risk assessment and its processes;</li><li>Evaluate the IT threat landscape to reduce risk, leading auditing, and compliance initiatives,</li><li>Assist in implementation of the IT Cyber Security strategies, policies, and procedures;</li><li>Prepare the documentation for the IT Cyber Security reports and guidelines;</li><li>Develop and enhance an information security management framework;</li><li>Monitor, maintain and administrate the IT security devices (such as Firewalls, Cor Switches, Web filtering, Spam Filtering devices... etc.) in coordination with IT Infrastructure and Cloud Unit to ensure no threats impacting the operations of these devices.</li><li>Understand and interact with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems, and services;</li><li>Partner with business stakeholders across INDEX Holding group to raise the awareness of Cyber Security risk management concerns by conducting the required training and workshops;</li><li>Assists with the overall business technology planning, providing a current knowledge and future vision of technology and systems.</li><li>Manage and maintain cyber security incident management and track accordingly;</li><li>Review the audit reports and assist to tackle the security issues raised by the auditors.</li><li>Conduct a periodic security check on all the relevant IT systems and services that are running in production.</li><li>Conduct a periodic penetration testing to the relevant technologies that are running in production.</li><li>Conduct a periodic vulnerability assessment to the relevant technologies that are running in production.</li><li>Perform a periodic check of the backup restoration practice in INDEX holding to ensure the consistency of the backup data and integration;</li><li>Assist in controlling IT related risk by advising management and functional units on all IT policies and procedures;</li><li>Ensure the confidentiality and protection of corporate data, proprietary information, and intellectual property;</li><li>Check the updates on the systems to ensure the patch management with the latest patches and upgrades on a regular basis;</li><li>Assist in managing the crisis situations, involving complex technical hardware or software problems and ensure adequate provision for business continuity and disaster recovery;</li><li>Ensuring that INDEX Holding is adaptable to evolving cyber security compliance regulations.</li><li>Solicit, study, and evaluate all IT Projects Plans to ensure risk low effectiveness, in addition, identify and develop risk analysis and supervise risk management for the IT department;</li><li>Undertake such other tasks as and when required by the Chief Technology Officer.</li><li>Data access, security, and integration;</li><li>Reduction in IT related risks, business continuity and disaster recovery plans;</li><li>Coordinate with the department employees to provide the necessary IT Security adviser to the Group employees.</li></ul>Qualifications and Experience Required :<ul><li>Degree in IT related discipline Computer Science or equivalent and additional professional technical training/certifications in System Administration;</li><li>Master&rsquo;s Degree on IT or equivalent is preferred;</li><li>Certified Information Systems Security Professional CISSP, Certified Ethical Hacker CEH, Certified Information Security Manager CISM, and hands-on experience associated with risk management, Penetration Testing and Vulnerability Assessment, Certified Information Systems Auditor CISA is add-on;</li><li>Minimum 7 years of IT experience in IT Cyber Security, IT Systems and Networking Evaluation;</li><li>Demonstrate knowledge of security standards and their applications;</li><li>Exposure with the latest technology and research background will be an added advantage;</li><li>Excellent project management skills</li><li>Excellent communication skills in English, both written and oral.</li><li>Arabic language is an advantage;</li><li>Excellent organizational and time management skills; and Excellent interpersonal skills.</li></ul>Job Types: Full-time, PermanentApplication Question(s):<ul><li>What is your salary expectation in AED?</li><li>Which certifications do you hold (CISSP, CEH, CISM, CISA)</li><li>How many years of experience do you have in IT Security and Risk Management within the UAE?</li><li>Have you worked on security technologies and applications related to Microsoft, Cisco, and AWS? If yes, please list down the tools/platforms you have worked on along with your years of experience and level of expertise.</li></ul>Education:<ul><li>Bachelor's (Preferred)</li></ul>Work Location: In person

IT Cyber Security Specialist

Sentara Health

<div>
 
 City/State
 
 
 
 Norfolk, VA
 
 
 
 Work Shift
 
 
 
 First (Days)
 
 
 
 Overview:
 
 
 
 
 Overview
 
 
 
 The ASM Manager leads the Cyber Attack Surface Management function, responsible for assisting with strategy, execution, and continuous improvement of capabilities that reduce the organization&rsquo;s cyber exposure. This role ensures alignment with enterprise risk priorities and coordinates across security, IT, and business units.
 
 
 <ul>
 <li>
 Define and execute the ASM program strategy, roadmap, and priorities.
 </li>
 <li>
 Oversee all ASM functions: threat intelligence, third-party incident management, identity hygiene, vulnerability management, and legacy OS risk tracking.
 </li>
 <li>
 Establish governance, processes, and performance metrics.
 </li>
 <li>
 Act as primary stakeholder liaison across Security Operations, IT, Risk, and Vendor Management.
 </li>
 <li>
 Drive risk-based prioritization and decision-making.
 </li>
 <li>
 Present risk posture, trends, and recommendations to senior leadership.
 </li>
 <li>
 Ensure integration with CTOC and broader cyber security programs.
 
 
 
 </li>
 </ul>
 
 Education
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or a related field&mdash;or equivalent industry training and certifications. (Preferred)
 
 
 
 </li>
 </ul>
 or
 
 
 <ul>
 <li>
 Experience in lieu of Bachelor&rsquo;s Degree -7 yrs relevant years&rsquo; experience without a degree
 
 
 
 </li>
 </ul>
 
 Certification/Licensure
 
 
 
 <ul>
 <li>
 Certification or License (Preferred)- CISSP/ CISM/CRISC/ Vendor/platform certifications related to vulnerability management, cloud security, or threat intelligence are a plus
 
 
 
 </li>
 </ul>
 
 Experience
 
 
 
 <ul>
 <li>
 7 yrs relevant years&rsquo; experience without a degree
 </li>
 <li>
 5+ years of experience with a degree
 </li>
 <li>
 Experience leading or supporting Cyber Attack Surface Management (ASM), vulnerability management, threat intelligence, or cyber exposure management programs.
 </li>
 <li>
 Strong hands-on experience coordinating vulnerability remediation efforts and driving risk reduction initiatives across cross-functional teams.
 </li>
 <li>
 Experience building, operationalizing, and maturing cybersecurity processes, governance frameworks, and remediation workflows.
 </li>
 <li>
 Experience partnering with Security Operations, Infrastructure, Cloud, IAM, Risk, Compliance, and Vendor Management teams in a complex enterprise environment.
 </li>
 <li>
 Experience with cybersecurity platforms and tools such as Tenable, Qualys, CrowdStrike, ServiceNow, Microsoft Defender, Palo Alto, or similar technologies.
 
 
 
 </li>
 </ul>
 We provide market-competitive compensation packages, inclusive of base pay, incentives, and benefits. The base pay rate for Full Time employment is:$116,729.60-$216,777.60. Additional compensation may be available for this role such as shift differentials, standby/on-call, overtime, premiums, extra shift incentives, or bonus opportunities.
 
 
 
 Benefits: Caring For Your Family and Your Career
 
 
 
 <ul>
 <li>
 Medical, Dental, Vision plans
 </li>
 <li>
 Adoption, Fertility and Surrogacy Reimbursement up to $10,000
 </li>
 <li>
 Paid Time Off and Sick Leave
 </li>
 <li>
 Paid Parental &amp; Family Caregiver Leave
 </li>
 <li>
 Emergency Backup Care
 </li>
 <li>
 Long-Term, Short-Term Disability, and Critical Illness plans
 </li>
 <li>
 Life Insurance
 </li>
 <li>
 401k/403B with Employer Match
 </li>
 <li>
 Tuition Assistance &ndash; $5,250/year and discounted educational opportunities through Guild Education
 </li>
 <li>
 Student Debt Pay Down &ndash; $10,000
 </li>
 <li>
 Reimbursement for certifications and free access to complete CEUs and professional development
 </li>
 <li>
 Pet Insurance
 </li>
 <li>
 Legal Resources Plan
 </li>
 <li>
 Colleagues have the opportunity to earn an annual discretionary bonus if established system and employee eligibility criteria is met.
 
 
 
 </li>
 </ul>
 
 Sentara Health is an equal opportunity employer
 
 and prides itself on the diversity and inclusiveness of its close to an almost 30,000-member workforce. Diversity, inclusion, and belonging is a guiding principle of the organization to ensure its workforce reflects the communities it serves.
 
 
 In support of our mission &ldquo;to improve health every day,&rdquo; this is a tobacco-free environment.
 
 
 
 For positions that are available as remote work,
 
 
 Sentara Health employs associates in the following states:
 
 
 
 Alabama, Delaware, Florida, Georgia, Idaho, Indiana, Kansas, Louisiana, Maine, Maryland, Minnesota, Nebraska, Nevada, New Hampshire, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, South Carolina, South Dakota, Tennessee, Texas, Utah, Virginia, Washington, West Virginia, Wisconsin, and Wyoming.
</div>

Cyber Attack Surface Management Manager

Elbit Systems of America

Company Information: 
Elbit America is a leading provider of high-performance products, system solutions, and support services focusing on the defense, homeland security, commercial aviation, and medical instrumentation markets. With facilities throughout the United States, Elbit Systems of America is dedicated to supporting those who contribute daily to the safety and security of the United States. Elbit Systems of America, LLC is wholly owned by Elbit Systems Ltd. (NASDAQ: ESLT and TASE: ESLT), a global high-technology company engaged in a wide range of programs for innovative defense and commercial applications. For additional information, visit: ElbitAmerica.com or follow us on YouTube.
 
Job Summary: 
The Cybersecurity Compliance Program Manager leads and oversees the organization’s comprehensive cybersecurity compliance initiatives, ensuring alignment with key standards such as CMMC, ISO 27001, SOX, PCI DSS, and Cyber Essentials. This role is responsible for developing and maintaining compliance policies, coordinating and managing internal and external audits, conducting risk assessments, and driving remediation efforts. The manager collaborates with cross-functional stakeholders to ensure regulatory adherence, proactively identifies areas for process improvement, and provides expert guidance to mitigate organizational risk while supporting a culture of security and compliance.
 
Responsibilities and Tasks
 <ul>
<li>Lead Cybersecurity Compliance Program:</li>
<li>Serve as the primary owner for all cyber compliance initiatives, policies, and processes.</li>
<li>Drive compliance strategy and execution across the organization.</li>
</ul>
CMMC Compliance Leadership: 
Oversee all activities related to achieving and maintaining Cybersecurity Maturity Model Certification (CMMC) compliance.
 Coordinate gap assessments, remediation plans, and evidence collection.
 
Manage Multi-Framework Compliance: 
Ensure compliance with additional standards and regulations, including:
 <ul>
<li>ISO 27001</li>
<li>Cyber Essentials</li>
<li>SOX (Sarbanes-Oxley)</li>
<li>PCI DSS (Payment Card Industry Data Security Standard)</li>
</ul>
Develop and maintain documentation, policies, and procedures aligned with these frameworks.
 
Audit Coordination: 
Act as the primary point of contact for internal and external audits.
 Prepare and present compliance evidence and reports to auditors and leadership.
 
Risk Management: 
Identify compliance risks and develop mitigation strategies.
 Maintain a compliance risk register and track remediation efforts.
 
Stakeholder Engagement: 
Collaborate with IT, Security, Legal, and Business teams to ensure compliance requirements are understood and met.
 Provide training and awareness programs related to compliance obligations.
 
Education, Experience/Knowledge & License/Certification
 <ul>
<li>Bachelor’s degree in Cybersecurity, Information Technology, or related field</li>
<li>7+ years of experience in Governance, Risk, and Compliance roles.</li>
<li>Strong knowledge of CMMC and DFARS requirements.</li>
<li>Certifications such as CISA, CISSP, CRISC, or ISO 27001 Lead Auditor are highly desirable.</li>
</ul>
Skills and Abilities
 <ul>
<li>Experience managing audits and regulatory assessments.</li>
<li>Excellent communication and leadership skills (without direct people management).</li>
</ul>
#LI-SW1
 
Here Are Some of the Great Benefits We Offer: 
<ul>
<li>Most locations offer a 9/80 schedule, providing every other Friday off</li>
<li>Competitive compensation & 401(k) program to plan for your future</li>
<li>Robust medical, dental, vision, & disability coverage with qualified wellness discounts</li>
<li>Basic Life Insurance and Additional Life & AD&D Insurances are available</li>
<li>Flexible Vacation & PTO</li>
<li>Paid Parental Leave</li>
<li>Generous Employee Referral Program</li>
<li>Voluntary Benefits Available: Longer Term Care, Legal, Identity Theft, Pet Insurance, and more</li>
<li>Voluntary Tricare Supplement available for military retirees</li>
</ul>
This job description does not list all the duties of the job. You may be asked by your supervisors or managers to perform other duties. The employer has the right to revise this job description at any time. The job description is not an employment contract. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position. Elbit America is an equal opportunity employer as to all protected groups, including protected veterans and individuals with disabilities.
 
*** If you encounter issues with your application, please email technicalsupport@elbitsystems-us.com***

Cybersecurity Compliance Program Manager (GRC)

Phoenix Cyber

<div>Phoenix Cyber is looking for a Cybersecurity Policy Analyst to support a government client. T
Job Responsibilities:
<ul><li>Reviews, consolidates and develops cybersecurity policy in accordance with agency requirements.
</li><li>Fully versed in general tenets supporting the overall DOD implementation of cybersecurity policies, procedures and processes to ensure a balance of security and operational requirements.
</li><li>Required to brief senior management on cybersecurity policy chances, updates and progress.</li></ul>
Minimum Experience:<ul><li>
Seven (7) years of relevant cybersecurity policy experience</li></ul>
Required Skills:<ul><li>
Must possess DOD Secret Clearance</li><li>
Category IAM Level III</li></ul>
Phoenix Cyber is a national provider of cybersecurity engineering services, operations services, sustainment services and managed security services to organizations determined to strengthen their security posture and enhance the processes and technology used by their security operations team.
Phoenix Cyber is an equal opportunity employer and complies with Executive Order 11246, Section 503 of the Rehabilitation Act of 1973, the Vietnam Era Veteran's Readjustment Assistance Act (VEVRAA), all amendments to these regulations, and applicable executive orders, federal, and state regulations. Applicants are considered without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, and/or veteran status.
Phoenix Cyber participates in E-Verify to confirm the employment eligibility of all newly-hired employees. To learn more about E-Verify, including your rights and responsibilities, go to https://www.e-verify.gov/
PPXpGClbJb</div>

Cybersecurity Policy Analyst [JOB ID: 20260612]

Air Products

<div>At Air Products, we reimagine what&rsquo;s possible. By tapping into the motivation of our people and our collective experience, we create the ideas and innovations that drive us forward. When we come together &ndash; where every voice is heard and everyone knows they belong and matter &ndash; we create solutions that launch people into space, support lifesaving care in hospitals, and enable the construction of groundbreaking, world scale production facilities. 
Reimagine What&rsquo;s Possible 
The Cybersecurity Manager (NGHP) is the program&rsquo;s overall technical authority for OT/ICS cybersecurity across all the elements (Power Generation, Power Transmission and Green Hydrogen Production) of the flagship NEOM Green Hydrogen project in the Kingdom of Saudi Arabia. The is a key role, accountable for OT/ICS cybersecurity compliance strategy, execution, integrated testing and oversight of the team to deliver the cybersecurity scope to obtain the final compliance from permitting authorities in KSA.
The Cybersecurity Manager leads a functional team of cybersecurity engineers and professionals and also expected to manage and deliver the end-to-end scope of cybersecurity of the project with focus on proof-of-compliance, closure of design gaps, and implementing the cyber-risk assessment recommendations. The role provides cross-functional leadership and interfaces among Project Management, Process Controls, Digital Technology, Vendors, Sub-Contractors, consultants and end-Customer / Facility Operator (NEOM Green Hydrogen Company).
This role is based out of Duba, Tabuk Region, Saudi Arabia working on rotation of 8 Weeks ON / 2 Weeks OFF.
This position will be a site-based role with the below duties:<ul><li>
Revisit and strategize the implementation of the project cyber compliance roadmap at the current stage of the project; align to NCA ECC/OTCC and HCIS Sec-12 and Facility Owner&rsquo;s policies.</li><li>
Chair the cyber oversight committee meetings; drive decisions on technology adoption and ensure the cybersecurity scope is implemented to the project needs and successful delivery for operations.</li><li>
Identify the scope matrix, test plan and procedures for the project scope and maintain the delivery and Stage-4 submission readiness.</li><li>
Ensure comprehensive oversight and execution of the cybersecurity scope for all DT (Digital Technology) and Plant Computing systems, coordinating with relevant teams to validate that security controls, compliance measures, and risk mitigation strategies are effectively implemented and maintained across these domains.</li></ul><ul><li>
Review and approval of Proof of Compliance (PoC) documents from vendors, sub-contractors and EPC team prior to submission to the Facility Operator (FO) and the Consultant for review.</li><li>
Lead the closure of Cyber Risk Assessment recommendations and ensure the design/contract gaps are also closed.</li><li>
Oversight on the implementation of DMZ engineering, cyber services integration, and hardening procedures at all network layers required for compliance submittals.</li></ul><ul><li>
Integrate cyber work packages and prerequisites into project schedule and ensure the readiness of HCIS Stage-4 milestone is in line with the project commissioning and start-up milestones.</li><li>
Accountability in definition and maintaining the deliverable list and proof of compliance, and their verification before transmittal to Facility Operator/Customer.</li><li>
Publish and maintain all required OT/ICS cybersecurity related plans, procedures that are required to be issued in the capacity of the EPC Contractor and Integrator.</li><li>
Lead vendor and sub-contractor coordination for their delivery of respective OT/ICS cybersecurity scope, their validation, punch closure and turnover for commissioning and start-up.</li><li>
Actively pursue technical rigor to bring consistency in technical solutions wherever possible to create uniformity in order will facilitate ease of maintenance of the project asset when handed over to Facility Operator (NGHC).</li><li>
Ensuring a proper handover and handoff to the facility operator including necessary training as identified and aligned in the cyber oversight committee liaise with the Air Products Subject Matter Experts (SME) as required to resolve the technical issues</li><li>
Maintain the alignment on the cross functional team and advise on schedule, budget impacts and change orders.</li><li>
Primary office base is project site office in Duba, KSA, with frequent travel to PWE sites (Solar/Wind/Transmission) and vendor locations as required. Site engagement is essential during pre-commissioning, commissioning, and CSAT phase of the project.</li></ul>
Minimum Requirements:<ul><li>
Bachelor&rsquo;s degree in engineering (Electronics/Instrumentation/Automation preferred) or equivalent; advanced ICS/OT cybersecurity qualifications (ISA/IEC 62443, NIST CSF).</li><li>
15+ years leadership in ICS/OT cybersecurity on CNI-class facilities (KSA preferred); proven delivery through HCIS Stage-4.</li><li>
Deep understanding of ICS architectures (BPCS/SIS/SCADA), DMZ (L3.5/L3.7), segmentation/firewalls/Panorama, SIEM/Splunk, USB gateway, Nozomi, MFA/jump-host, RBAC.</li><li>
Strong cross-functional interface background with Process Controls (PCE) and DT/Plant Computing.</li><li>
Working Experience in KSA regulations such as NCA ECC-1:2018, OTCC-1:2022 and cybersecurity aspects outlined by SAIS (Supreme Authority of Industrial Security).</li><li>
Technical fluency: DMZ design, firewall management (Panorama), SIEM/logging, anomaly detection, endpoint controls, and evidence workflows.</li><li>
Documentation: CSAT/POC packs, Aconex/OT workflows, checklists, inventories, submission quality.</li><li>
Preferred to have certifications such as ISA/IEC 62443 Cybersecurity Expert; CISSP/CCSP; GIAC ICS or any vendor-specific security (Palo Alto, Splunk).</li><li>
Evidence of delivering KSA ICS / OT Cybersecurity regulatory compliance projects is a strong plus.</li></ul>
#LI-LG1 
Founded in 1940, Air Products is a world-leading industrial gases company and has a proud history of innovation, operational excellence, with an unwavering commitment to safety and environmental stewardship. Working together, we are taking our passion and diverse backgrounds forward to reimagine what&rsquo;s possible and generate a cleaner future for our customers, our communities, and the world.</div>

NGHP Cybersecurity Manager

EVA pharma

<div>
 
 Join EVA Pharma, a leading pharmaceutical company dedicated to empowering the fight for Health and well-being as a fundamental human right. Recognized and certified as&nbsp;a best&nbsp;place to work, we are committed to fostering a supportive and innovative environment for our team members.&nbsp;
 
 
 
 
 Job Summary&nbsp;
 
 
 
 As a
 
 Cybersecurity Manager
 
 , you will have total ownership of our security posture, strategy, and execution. This position demands a rare blend of strategic leadership and deep technical execution; you won't just oversee policy; you will actively build and refine our defences. The ideal candidate has a proven track record of running a SOC, navigating complex regulatory audits, and managing budgets, combined with the agility to scale these functions in a fast-paced environment.
 
 
 
 
 Key Responsibilities:
 
 
 <ul>
 <li>
 
 Security leadership &amp; strategy:
 
 owning the roadmap, the team, and the budget, and translating risk into decisions the business understands
 </li>
 </ul>
 <ul>
 <li>
 
 Detection &amp; response:
 
 leading SOC operations and the full incident response lifecycle, hands-on with modern detection and response, threat intelligence, and security orchestration
 </li>
 <li>
 
 Offensive security:
 
 directing vulnerability management, penetration testing, and proactive testing of our own defences
 </li>
 <li>
 
 Secure architecture:
 
 designing and enforcing controls across identity, access, endpoints, and network, in both on-premises and multi-cloud environments
 </li>
 <li>
 
 Application security:
 
 embedding secure design, threat modelling, and security into the development lifecycle
 </li>
 <li>
 
 Governance, risk &amp; compliance:
 
 building and maintaining our GRC program against recognized standards (ISO 27001, GDPR, and local data protection law) and owning internal and external audits
 </li>
 <li>
 
 Resilience:
 
 building and testing our business continuity and disaster recovery capability
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 <ul>
 <li>
 Bachelor's degree in computer science or a related field (master's a plus)
 </li>
 <li>
 
 8+ years in information/cyber security, with 3+ years leading a team
 
 and real ownership of people and budget, not just projects
 </li>
 </ul>
 <ul>
 <li>
 
 Deep, hands-on technical depth
 
 &mdash; you've personally led SOC operations and worked directly with detection and response, SIEM/SOAR, threat intelligence, and incident response. You've run vulnerability management, penetration tests, and other offensive techniques yourself
 </li>
 <li>
 
 Strong GRC experience
 
 &mdash; you've actually implemented standards like ISO 27001 and GDPR (not just read about them) and built BCP/DR programs from the ground up
 </li>
 <li>
 
 Secure architecture experience
 
 &mdash; across on-premise and cloud (Azure, GCP, AWS, OCI), covering IAM, MFA, patch management, least privilege, device management, and physical security
 </li>
 <li>
 
 Secure application experience
 
 &mdash; threat modelling and DevSecOps
 </li>
 <li>
 
 Relevant certifications
 
 &mdash; CISSP, CISM, and/or ISO 27001 Lead Implementer/Auditor
 </li>
 <li>
 
 Financial and budgeting experience
 
 , strong stakeholder management, and the ability to lead security awareness across the organization
 </li>
 </ul>
</div>

Cybersecurity Manager

Search 7057+ Cyber security manager jobs near you this June. New roles added regularly across leading industries. Apply today.