cyber security manager

Carnival Cruise Line

<div><p>The GCS - Security Architecture function is responsible for the development of technical security design specifications, integration specifications, standards, requirements, and implementation of appropriate technology architectures to mitigate risks to Carnival Corp and customer information assets. This position will work with all global brands as a project resource providing guidance and signing off on project implementations, firewall change requests and provide general guidance on Cybersecurity best practices.</p><p></p><p><b><br>
Essential Functions:</b></p><ul><li><p>
Work with brand IT teams and/or Business stakeholders on their projects to ensure that new systems and/or applications meet security best practices, published minimum security requirements, corporate standards, and policies.</p></li><li><p>
Provide security architecture and consulting services to business units and IT/OT-Maritime organizations.</p></li><li><p>
Research, test and implement security tools to scan, monitor and protect computing and networking environments.</p></li><li><p>
Document and transition security tools to security operations teams.</p></li><li><p>
Review network designs, applications data flows, system integrations and provide appropriate signoff</p></li><li><p>
Create high level network designs for GCS security tools and reference architectures documentation</p></li><li><p>
Review system design of existing applications/systems utilizing a common framework to identify potential vulnerabilities and gaps in the system, helping to mitigate cyber risks and protect sensitive data by proactively addressing potential threats before they can be exploited.</p></li><li><p>
Build, support and mature GCS security tools and architectural review process</p></li><li><p>
Develop hardening standards for networking and computing environments using industry best practices.</p></li></ul><p></p><p><b><br>
Knowledge, Skills &amp; Abilities:</b></p><ul><li><p>
Scope: Experience in Security Architecture, designing secure systems and architectures that can withstand cyber threats. Ability to communicate Cyber security architecture in non-technical terms to business stakeholders. Understanding of AI related Cybersecurity risks. Understanding of OT (Operational Technology) Cybersecurity risks.</p></li><li><p>
Problem solving: Creating, evaluating, and managing security architectures that align with business goals. Translating technical needs for stakeholders to resolve conflicts and gain agreement on solutions that align with Cybersecurity best practices and enterprise Standards and Policies.</p></li><li><p>
Impact: Contribute to technical designs that enforce secure, resilient, and compliant technology infrastructures that protect critical data.</p></li></ul><p></p><p><b><br>
Qualifications:</b></p><ul><li><p>
Bachelor's degree in Cyber Security (Master's degree a plus). Recognized industry Cybersecurity Certifications such as CISSP.</p></li><li><p>
Cloud environment (Azure, AWS, GCP) security and design. Application/Web/API/Container Security. Extensive knowledge of Windows, Linux, Network and Cloud Security and Cybersecurity best practices. Understanding of IAM and Least Privileged access models.</p></li><li><p>
5+ Cyber Security in Large Enterprise setting</p></li><li><p>
Solid understanding of Cybersecurity risks in architectural designs and recommending mitigating controls. Key experience should includes cloud security (Azure/AWS/GCP), identity and access management (IAM), network segmentation, encryption, threat modeling within Enterprise IT and OT environments. Strong communication and strategic leadership skills are vital for aligning security with business goals.</p></li></ul><p></p><p><br>
Travel: Less than 25% with shipboard travel likely</p><p>
Work Conditions: Work primarily in a climate-controlled environment with minimal safety/health hazard potential.</p><p>
Physical Demands: Must be able to remain in a stationary position at a desk and/or computer for extended periods of time.</p><p></p><p><br>
This position is classified as &ldquo;in-office.&rdquo; As an in-office role, it requires employees to work from a designated Carnival office in South Florida Monday through Thursday each week. Employees may work from their homes on Fridays. Candidates must be located in (or willing to relocate to) the Miami/Ft. Lauderdale area.</p><p>
Offers to selected candidates will be made on a fair and equitable basis, taking into account specific job-related skills and experience.</p><p></p><p><br>
At Carnival, your total rewards package is much more than your base salary. All non-sales roles participate in an annual cash bonus program, while sales roles have an incentive plan. Director and above roles may also be eligible to participate in Carnival&rsquo;s discretionary equity incentive plan. Plus, Carnival provides comprehensive and innovative benefits to meet your needs, including:</p><ul><li>
Health Benefits:<ul><li>
Cost-effective medical, dental and vision plans</li><li>
Employee Assistance Program and other mental health resources</li><li>
Additional programs include company paid term life insurance and disability coverage</li></ul></li><li>
Financial Benefits:<ul><li>
401(k) plan that includes a company match</li><li>
Employee Stock Purchase plan</li></ul></li><li>
Paid Time Off<ul><li>
Holidays &ndash; All full-time and part-time with benefits employees receive days off for 8 company-wide holidays, plus 2 additional floating holidays to be taken at the employee&rsquo;s discretion.</li><li>
Vacation Time &ndash; All full-time employees at the manager and below level start with 14 days/year; director and above level start with 19 days/year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 84 hours/year. All employees gain additional vacation time with further tenure.</li><li>
Sick Time &ndash; All full-time employees receive 80 hours of sick time each year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 60 hours each year.</li></ul></li><li>
Other Benefits<ul><li>
Complementary stand-by cruises, employee discounts on confirmed cruises, plus special rates for family and friends</li><li>
Personal and professional learning and development resources including tuition reimbursement</li><li>
On-site Fitness center at our Miami campus</li></ul></li></ul><p></p><p><br>
#Corp</p><p>
#LI-Hybrid</p><p>
#LI-SH1</p><div>
<div><div><div><div><p>About Us</p>
<p>Carnival Corporation &amp; plc is the world&rsquo;s largest leisure travel company, our mission to deliver unforgettable happiness to our guest through our diverse portfolio of leading cruise brands and island destinations, including Carnival Cruise Line, Holland America Line, Princess Cruises, and Seabourn in North America and Australia; P&amp;O Cruises and Cunard Line in the United Kingdom; AIDA in Germany; Costa Cruises in Southern Europe.</p><br>
<p><br>
Join us and embark on a career that offers not only the chance to grow professionally but also the opportunity to be part of a global community that makes a difference.</p>
<div></div><p>In addition to other duties/functions, this position requires full commitment and support for promoting ethical and compliant culture. More specifically, this position requires integrity, honesty, and respectful treatment of others, as well as a willingness to speak up when they see misconduct or have concerns.</p>
<div></div><p>Carnival Corporation &amp; plc and Carnival Cruise Line is an equal employment opportunity/affirmative action employer. In this regard, it does not discriminate against any qualified individual on the basis of sex, race, color, national origin, religion, sexual orientation, age, marital status, mental, physical or sensory disability, or any other classification protected by applicable local, state, federal, and/or international law.
</p><p></p><div>https://www.dol.gov/sites/dolgov/files/WHD/legacy/files/eppac.pdf</div>
<p>https://www.dol.gov/sites/dolgov/files/WHD/legacy/files/fmlaen.pdf</p></div></div></div></div></div></div><div></div>

Architect, Cybersecurity, GCS (Corporate)

COZMALABS

<p>We are seeking a highly skilled and motivated Cyber Security Architect with strong system, on prem and Cloud Security expertise to oversee and enhance the organization&rsquo;s internal security architecture, controls, and policies while actively contributing to external security initiatives and projects.</p><p>This role combines strategic architecture leadership, hands-on implementation, security research, operations oversight, and cloud security engineering, with a strong focus on Microsoft environments such as Microsoft 365, Microsoft azure , and OS security.</p><p>The ideal candidate will possess deep expertise in enterprise security architecture, domain security, on-prem and hybrid infrastructure protection, cloud-native security controls, and DevSecOps integration.</p><p>Experience Requirements</p><ul><li>Minimum 7+ years in system and Cloud Security role.</li><li>Proven experience in enterprise security architecture (on-prem + cloud)</li><li>Experience in security research, security operations, and security assurance</li><li>Experience in setting and documenting security processes and procedures in compliance with Qatar NCSA guidelines and security best practices.</li><li>Experience in operating system and infrastructure hardening.</li></ul><p>Key Responsibilities</p><ul><li>Design, implement, and maintain enterprise-wide security architecture for the company internal security, user devices, cloud, and hybrid environments.</li><li>Develop and enforce security policies, standards, and procedures.</li><li>Lead security risk assessments and define mitigation strategies.</li><li>Align security controls with business objectives and regulatory requirements.</li><li>Oversee internal security governance and compliance frameworks (ISO 27001, NIST, CIS).</li><li>Architect and secure Azure cloud environments (IaaS, PaaS, SaaS).</li><li>Implement cloud-native and third-party security controls.</li><li>Conduct detailed security assessments of cloud services to ensure compliance with internal policies and industry frameworks.</li><li>Identify and remediate misconfigurations using automated scanning and manual inspection.</li><li>Implement secure cloud architecture patterns and service integrations.</li><li>Contribute to threat modeling and cloud risk assessments.</li><li>Ensure secure hybrid integration between on-prem and Azure environments.</li><li>Secure Active Directory and domain environments.</li><li>Implement GPO hardening and identity security controls.</li><li>Manage IAM, RBAC, MFA, and privileged access strategies.</li><li>Harden Windows/Linux servers and enterprise endpoints.</li><li>Oversee firewall configurations, IDS/IPS, VPN security, and segmentation.</li><li>Implement encryption and data protection strategies.</li><li>Perform vulnerability assessments and coordinate penetration testing.</li><li>Develop scripts and automation tools (PowerShell, Python, Bash) to enhance monitoring and compliance validation.</li><li>Integrate security controls within CI/CD pipelines (DevSecOps practices).</li><li>Monitor emerging threats, tools, and vulnerabilities.</li><li>Evaluate security technologies and recommend improvements.</li><li>Contribute to threat modeling exercises.</li><li>Participate in external security architecture and implementation projects.</li><li>Provide technical advisory for client-facing security initiatives.</li><li>Review third-party security integrations and solutions.</li><li>Support pre-sales security design when required.</li><li>Conduct risk assessments and compliance audits.</li><li>Ensure adherence to CIS Benchmarks, NIST, ISO 27001.</li><li>Develop remediation guidance and contribute to policy development.</li><li>Participate in external security architecture and implementation projects.</li><li>Provide technical advisory for client-facing security initiatives.</li><li>Review third-party security integrations and solutions.</li><li>Support pre-sales security design when required.</li></ul><p>Required Technical Expertise</p><ul><li>Deep technical understanding and hands on of:</li></ul><p>Cloud &amp; Security Platforms</p><ul><li>Cloud security.</li><li>Data protection strategies</li><li>Zero Trust Architecture</li></ul><p>Infrastructure &amp; Systems Security</p><ul><li>Active Directory and Microsoft 365 hardening</li><li>User devices security</li><li>Domain security best practices</li><li>Endpoint security solutions</li><li>Hybrid identity solutions</li></ul><p>DevSecOps &amp; Automation</p><ul><li>CI/CD security integration</li><li>Secure coding awareness</li><li>Security automation scripting</li></ul><p>Certifications (Required / Strongly Preferred)</p><ul><li>CISSP &ndash; Certified Information Systems Security Professional</li><li>CCSP &ndash; Certified Cloud Security Professional</li><li>CISM &ndash; Certified Information Security Manager</li><li>Microsoft Azure Security Engineer Associate (AZ-500)</li><li>CompTIA Security+ (Foundational)</li></ul><p>Education</p><p>Bachelor&rsquo;s degree in Cyber Security, Computer Science, Information Systems, or related field (Master&rsquo;s preferred).</p><p>Work Location: In person</p>

Cybersecurity

AECOM

<div><b>Company Description</b><p><b><br>
Work with Us. Change the World.</b></p><p>
At AECOM, we're delivering a better world. Whether improving your commute, keeping the lights on, providing access to clean water, or transforming skylines, our work helps people and communities thrive. We are the world's trusted infrastructure consulting firm, partnering with clients to solve the world&rsquo;s most complex challenges and build legacies for future generations.</p><p>
There has never been a better time to be at AECOM. With accelerating infrastructure investment worldwide, our services are in great demand. We invite you to bring your bold ideas and big dreams and become part of a global team of over 50,000 planners, designers, engineers, scientists, digital innovators, program and construction managers and other professionals delivering projects that create a positive and tangible impact around the world.</p><p>
We're one global team driven by our common purpose to deliver a better world. Join us.</p><b><br>
Job Description</b><p><br>
AECOM is seeking a seasoned Cyber-Physical System (CPS) Security &amp; Resiliency growth leader to establish and grow our Cyber-Physical System Security &amp; Resiliency team. This role builds the firm&rsquo;s capability to help clients strengthen and modernize cyber-physical environments through integrated security, risk, and resilience strategies.</p><p><b>
While governance and risk may intersect with information technology (IT), this role is not IT-centric.</b> <b>The focus is on the safety, security, and resilience of cyber-physical systems across CPS/OT environments (e.g., industrial control systems (ICS), supervisory control and data acquisition (SCADA), OT) and digitally enabled CPS/IT systems.</b></p><p><b>
Role Primary Objectives:</b></p><ul><li>
Establish the <b>CPS Security &amp; Resilience Team </b>as a source of top and bottom-line growth within the Energy Practice.<b>
</b></li><li>Strengthen client confidence and executive trust in AECOM&rsquo;s ability to manage modern infrastructure risk.</li><li>
Establish a repeatable, scalable CPS capability that integrates with existing AECOM services.</li><li>
Position AECOM as a trusted consultant on the convergence of infrastructure, automation, AI, and physical consequence.</li><li>
Establish governance, risk, and resilience models for the integration of AI and advanced analytics into CPS/OT and CPS/IT environments, with explicit focus on physical consequence, system safety, and operational continuity.</li></ul><p><b>
Responsibilities:</b></p><p><b>
Cyber-Physical Systems (</b><b>CPS) Security &amp; Resilience</b><b> </b><b>Strategic Growth and Market Engagement</b></p><ul><li>
Establish the <b>CPS Security &amp; Resilience </b>practice<b> </b>for the Power sector</li><li>
Develop and execute go-to-market, recruitment, and top- and bottom-line growth strategies for the CPS Security &amp; Resiliency workstream</li><li>
Support strategic pursuits and key accounts from the cyber-physical resiliency lens, where CPS risk influences project outcomes or client confidence.</li><li>
Engage client executives, boards, and regulators on system-level risk, resilience, and governance.</li><li>
Act as a strategic partner to leadership on infrastructure resilience, reliability, and operational risk</li><li>
Advise clients on cyber-physical risk and resiliency implications of AI-enabled grid modernization, automation, DER integration, advanced protection schemes, and digitally enabled control environments</li><li>
Oversee and guide the development of reusable tools, templates, frameworks, and best practices for CPS Security &amp; Resiliency</li></ul><p><b>
Advisory &amp; Enterprise Alignment</b></p><ul><li>
Partner closely with Advisory leadership to align CPS services with broader operational, digital, and risk advisory offerings</li><li>
Coordinate with existing IT, OT, and cyber resources across AECOM to avoid duplication and fragmentation</li></ul><p><b>
Client Engagement, Delivery, and Practice Growth</b></p><ul><li>
Work closely with senior leadership to shape AECOM&rsquo;s <b>CPS Security &amp; Resilience </b>offerings and expand market presence</li><li>
Lead project workstreams while teaching and mentoring junior staff</li><li>
Support capture and proposal activities, including developing scopes of work, methodologies, and strategic content</li><li>
Build and maintain strong client relationships to identify new opportunities and ensure successful delivery</li><li>
Serve as a bridge between technical specialists and executive-level client discussions</li></ul><p><b>
Cyber-Physical Systems (CPS) Security &amp; Resilience Practice Elements:</b></p><ul><li>
Lead OT engagements related to cyber-physical systems</li><li>
Lead client engagements addressing AI-enabled CPS risk, resilience, and governance across CPS/OT and CPS/IT environments, including model risk, autonomy, decision authority, and failure propagation into physical systems</li><li>
Lead cybersecurity assessments, vulnerability analyses, and program reviews to help clients identify risks and prioritize improvements</li><li>
Conduct maturity assessments, risk evaluations, gap analyses, and policy reviews to help clients define long-term CPS/OT and CPS/IT strategies</li><li>
Develop OT governance models, operational frameworks, and investment plans that guide clients through modernization and lifecycle planning</li><li>
Facilitate workshops, interviews, and stakeholder meetings to gather requirements and translate them into strategic recommendations</li><li>
Embed CPS risk considerations into pursuits, delivery models, and client engagements</li><li>
Develop OT and ICS cybersecurity programs aligned with frameworks such as NIST CSF, NERC CIP, and IEC 62443</li><li>
Prepare guidance for OT security controls, monitoring approaches, segmentation strategies, governance, and compliance</li></ul><p><b>
CPS Security &amp; Resilience Leadership</b></p><ul><li>
Provide industry leadership and guidance on CPS/OT and CPS/IT security &amp; resiliency, promoting alignment with enterprise risk management, regulatory expectations, and delivery realities</li><li>
Advise clients on CPS architecture concepts, technology options, integration considerations, and migration strategies</li><li>
Oversee and guide master planning for CPS, including AI-enabled CPS, grid modernization, SCADA and EMS/DMS evolution, advanced automation, digital substations, and next-generation OT and CPS/IT architectures</li><li>
Evaluate operational risks and recommend solutions that improve resiliency, reliability, and worker safety in CPS/OT environments</li></ul><br>
<b>
Qualifications</b><p><b><br>
Minimum Requirements</b></p><ul><li>
BS degree in Engineering, Computer Science, Information Systems, Cybersecurity, or a related field and 10 years of related experience</li><li>
Minimum of 10 years of business leadership experience in cyber-physical systems, OT/ICS, infrastructure security, or resilience.</li><li>
Minimum of 10 years of experience delivering advisory services (strategy, governance, road mapping, program development, compliance) into cyber-physical system OT, ICS, and SCADA environments.</li><li>
Minimum years of OT or ICS experience in consulting, engineering, or cyber-physical environments.</li><li>
Proven track record of growth, building, and scaling capabilities inside large engineering (AEC), EPC, or infrastructure organizations.</li><li>
Proven ability to translate risk into executive-level decision frameworks and business outcomes.</li><li>
Experience working across matrixed organizations with multiple business lines and stakeholders.</li><li>
Advanced knowledge of relevant CPS, OT, and cyber risk frameworks and regulatory constructs applicable to cyber-physical systems within critical infrastructure environments.</li><li>
Strong communication skills with experience developing client-facing reports, strategies, roadmaps, and presentations.</li><li>
Deep understanding of Power sector systems and the operational realities of infrastructure delivery.</li></ul><p><b>
Preferred Qualifications</b></p><ul><li>
Master of Business Administration (MBA) preferred</li><li>
15 years of OT or ICS experience in consulting, engineering, or cyber-physical environments.</li><li>
Cyber-physical training or certifications are preferred, e.g. &ndash;<ul><li>
C|CISO, GICSP, CISSP</li><li>
Consequence-focused training for Physical &amp; Digital Infrastructure, e.g. Consequence-Driven, Cyber-Informed Engineering (CCE ACCELERATE)</li><li>
AI-governance and/or AI-risk related training</li></ul></li><li>
15 years of P&amp;L ownership experience</li><li>
Previous experience developing CPS service offerings</li><li>
Previous experience developing and managing CPS-related managed services</li><li>
Industry voices and distinction preferred, e.g. &ndash;<ul><li>
Previously published in industry journals.</li><li>
Previous conference speaking engagements.</li><li>
Participated in various media such as TV, radio, podcasts, and webinars.</li></ul></li></ul><br>
<b>
Additional Information</b><p><br>
This position does not offer sponsorship now or in the future.</p><p>
This position does not offer relocation assistance.</p><div></div><p><b>
About AECOM</b></p><p>
AECOM is proud to offer comprehensive benefits to meet the diverse needs of our employees. Depending on your employment status, AECOM benefits may include medical, dental, vision, life, AD&amp;D, disability benefits, paid time off, leaves of absences, voluntary benefits, perks, flexible work options, well-being resources, employee assistance program, business travel insurance, service recognition awards, retirement savings plan, and employee stock purchase plan.</p><p>
AECOM is the global infrastructure leader, committed to delivering a better world. As a trusted professional services firm powered by deep technical abilities, we solve our clients&rsquo; complex challenges in water, environment, energy, transportation and buildings. Our teams partner with public- and private-sector clients to create innovative, sustainable and resilient solutions throughout the project lifecycle &ndash; from advisory, planning, design and engineering to program and construction management. AECOM is a Fortune 500 firm that had revenue of $16.1 billion in fiscal year 2025. Learn more at aecom.com.</p><p><b>
What makes AECOM a great place to work</b></p><p>
You will be part of a global team that champions your growth and career ambitions. Work on groundbreaking projects - both in your local community and on a global scale - that are transforming our industry and shaping the future. With cutting-edge technology and a network of experts, you&rsquo;ll have the resources to make a real impact. Our award-winning training and development programs are designed to expand your technical expertise and leadership skills, helping you build the career you&rsquo;ve always envisioned. Here, you&rsquo;ll find a welcoming workplace built on respect, collaboration and community&mdash;where you have the freedom to grow in a world of opportunity.</p><p>
As an Equal Opportunity Employer, we believe in your potential and are here to help you achieve it. All your information will be kept confidential according to EEO guidelines.</p></div>

AVP, Team Lead, Cyber-Physical Systems (CPS) Security & Resiliency (Power Sector)

Qatar National Bank

<div></div><div><div><ul><li><div><b>Business Unit</b>
</div><div>QNB - Qatar
</div></li><li><div><b>Division</b>
</div><div>Not Applicable
</div></li><li><div><b>Department</b>
</div><div>Not Applicable
</div></li><li><div><b>Location</b>
</div><div>Doha, Qatar
</div></li><li><div><b>Closing Date</b>
</div><div>31-Dec-2026
</div></li></ul></div><div><div><h5 class="jobSectionHeader"><b>About QNB</b></h5>
<p>Established in 1964 as the country&rsquo;s first Qatari-owned commercial bank, QNB Group has steadily grown to become the largest bank in the Middle East and Africa (MEA) region.</p>
<p>QNB Group&rsquo;s presence through its subsidiaries and associate companies extends to more than 31 countries across three continents providing a comprehensive range of advanced products and services. The total number of employees is more than 28,000 serving up to 20 million customers operating through 1,000 locations, with an ATM network of 4,300 machines.</p>
<p>QNB has maintained its position as one of the highest rated regional banks from leading credit rating agencies including Standard &amp; Poor&rsquo;s (A), Moody&rsquo;s (Aa3) and Fitch (A+). The Bank has also been the recipient of many awards from leading international specialised financial publications.</p>
<p>Based on the Group&rsquo;s consistent strong financial performance and its expanding international presence, QNB currently ranks as the most valuable bank brand in the Middle East and Africa, according to Brand Finance Magazine.</p>
<p>QNB Group has an active community support program and sponsors various social, educational and sporting events.</p>
</div></div><div><div><div><h5 class="jobSectionHeader"><b>Job Summary</b></h5>
</div><div><p>The incumbent will be responsible for the setup and management of the Cyber Security Strategy and Product management function in the Group Information Security (GIS) department. The incumbent will be a banking and finance technology thinker who constantly analyses the market for new technologies that would be best suited to support the Group&rsquo;s strategy</p>
</div></div><div><div><h5 class="jobSectionHeader"><b>Main Responsibilities</b></h5>
</div><div><p>A. Shareholder &amp; Financial: - Participate in the development, execution and maintenance of the IT Security strategy aligned to the overall corporate strategy, group long term goals and assist in the prioritization process. - Assist in the overall and annual IT Security business planning with the view of achieving the Group&rsquo;s short term goals and submit periodic reviews and resolution. - Provide inputs to the Technology Key Risk indicators (KRIs) which shall be applicable across the Group to manage Group&rsquo;s exposure to IT related risks effectively. Lead IT market research and provide applicable suggestions to further the Group&rsquo;s strategy and develop cost / benefit analysis to alternative technologies and processes. - Focal Point from GIS in the preparation of the GIS budget to support Group&rsquo;s long and short term goals. - Responsible for coordinating all aspects of the GIS budget process including: review of service area business plans and key performance indicators; annual capital budget and forecasts that include available and appropriate funding sources along with required project justification analysis; operating budget and forecast submissions that adhere to direction set by bank - Liaise with all Business Units Heads for preparing the yearly IT Business Plans, Prepare monthly and quarterly update on IT Business Plan. Monitor the Progress Status and raise issues / risks to GIS management. - Produce Availability Plans in line with QNB&rsquo;s business planning cycle; identifying Availability requirements early enough to take account of procurement lead times. - Create implement and report on Key Performance Indicators (KPIs) for performance monitoring purposes for the GIS group and monitor their achievement on a regular basis. - Produce Capacity Plans in line with QNB&rsquo;s business planning cycle; identifying Capacity requirements early enough to take account of procurement lead times. - Document the need for any increase or reduction in hardware resources based on service level requirements and cost constraints - Implements KPI&rsquo;s and best practices for Cyber Security Strategy and Product Management. - Promote cost consciousness and efficiency and enhance productivity, to minimise cost, avoid waste, and optimise benefits for the bank. - Act within the limits of the powers delegated to the incumbent and delegate authority to the respective staff and monitor exercise of the same. - Demonstrate clear understanding of the important factors behind the bank's financial &amp; non-financial performance.
</p><p>B. Customer (Internal &amp; External): - Build and maintain strong relationship with all other related departments, external entities and sections within GIS. - Defining &amp; implementing Service Level Agreements (SLAs) and Operation Level Agreements (OLAs) between GIS, IT Group, other Business Units and International Branches. - Monitors capital and operating budget performance of GIS to identify unfavourable budget variances and recommend mitigating actions or additional approvals required to minimize impact to yearend surplus/deficit. - Seek to continually exceed internal and external customer expectations through introduction of breakthrough IT Security technologies and processes aimed to improve the Group&rsquo;s products/services. - Produce regular management reports which include current usage of resources, trends and forecasts - Build and maintain a strong relationship with the Business Relationship Manager, technical teams within IT, finance team and external vendors of products and services - To assist customers in all their queries on Bank&rsquo;s product and seek solution to their requests. - Maintain activities in accordance with Service Level Agreements (SLAs) with internal departments/units to achieve improvements in turn-around time. - Build and maintain strong/effective relationships with related departments/units to achieve the Group&rsquo;s objectives</p><p>
C. Internal (Processes, Products, Regulatory): - Review and identify areas for improvement in the process to deliver effective &amp; efficient GIS projects and services - Act as a BCP Coordinator for GIS, coordinate implementation of DR setup as per the defined strategy - Assist in recruiting, motivating and developing personnel to ensure the function is staffed with individuals of the required caliber and that there is adequate succession planning and provision for future demands. - Analyse and recommend new products and solutions for GIS and business users to ensure that the group is up to-date with the latest trends in technology. - Support the new technology&rsquo;s development process, and ensure that project deliverables are met according to specifications and timeframes. - Compile and present relevant MIS to the Group CISO on a periodic basis for the existing systems and compare the existing functionalities vis-&agrave;-vis the efficiencies to be gained from proposed technologies. - Assist in the overall recruitment of the individual resources in the areas concerned - Continuous Improvement: - Set examples by leading improvement initiatives through cross-functional teams ensuring successes. - Identify and encourage people to adopt practices better than the industry standard. - Continuously encourage and recognise the importance of thinking out-of-the-box within the team. - Encourage, solicit and reward innovative ideas even in day-to-day issues.
</p><p>D. Learning &amp; Knowledge: - Possess good knowledge and experience in COBIT and ITIL framework. - Detailed understanding of IT systems and secure architecture designs. - Good understanding of suitable solutions for configuration management, service desk, software library etc. - Identify areas for professional development for self and direct reports and take necessary actions - Hold meetings with direct reports and assess their performance. - Attend specific conferences in areas of financial services technology breakthroughs and innovations to adapt suitable ones to the bank&rsquo;s security architecture and product portfolio. - Possess a superior knowledge of the GIS structure, its products and related risks together with a good knowledge of operations and related controls. - Identify areas for professional development of self and direct reports and act to enhance professional development of self and others - Proactively identify areas for professional development of self and undertake development activities. - Seek out opportunities to remain current with all developments in professional field. - Hold meetings with staff and assess their performance and your teams overall performance on a regular basis. - Take decisive action to ensure speedy resolution of unresolved grievances or conflicts within the team members. - Identify development opportunities and activities for staff and facilitate/coach them to improve their effectives and prepare them to assume greater responsibilities.
</p><p>E. Legal, Regulatory, and Risk Framework Responsibilities: - Comply with all applicable legal, regulatory and internal compliance requirements including, but not limited to, Group Compliance Policies and Procedures (AML &amp; CTF, Sanctions Policy, Data Protection Policy, Fraud Control Policy, Whistle Blowing Policy, Conflict of Interest and Insider Dealing Policy). - Understand and effectively perform your role under the Three Lines of Defence principle to identify measure, monitor, manage and report risks. - Ensure systematic good outcomes for clients in accordance with Conduct Risk policy. - Support the framework of RCSA, KRI, Incident reporting and remediation, as appropriate, in accordance with the Operational Risk Management requirements. - Maintain appropriate knowledge to ensure full qualification to undertake the role. - Complete all mandatory training provided by the Bank, attain, and maintain the required levels of competence. - Attend mandatory (internal and external) seminars as instructed by the Bank.
</p><p>F. Other: - Ensure high standards of data protection and confidentiality to safeguard commercially sensitive information. - Maintaining utmost confidentiality concerning customer and internal bank information obtained during the course of business and provide such information on a need to know basis only to Senior Management of QNB, Audit and Compliance functions, and relevant Regulators. - Maintain high professional standards to uphold QNB's reputation and to strengthen its market leadership position. - All other ad hoc duties/activities related to QNB that management might request from time to time. - Lead and develop the Cyber Security Strategy of the bank in line with the business strategy, regulatory requirement, best practices and ongoing cyber security challenges. - Benchmark and evaluate the performance of the technologies engineered and operated by the GIS Cyber Security Technologies &amp; Services teams to ensure that these are kept fine-tuned and updated with the latest technological developments.- Constantly scanning the market and competitors capabilities and bringing in technology proven in other markets and suggesting them across the group. - Keeping the CISO updated with latest developments in Cyber Security and raising any new cyber security risks to his attention. - Maintain the security architecture blueprints of the bank, liaising with the Enterprise IT architect and GITD Heads to develop and track the plans to achieve compliance. - Help to form the Information Security budget in collaboration with the Group Information Security Officer ensuring that systems under management are licensed and appropriately sized for the environment - Ensure that all the licenses and contracts are maintained and kept updated.</p>
</div></div><div><div><h5 class="jobSectionHeader"><b>Education and Experience Requirements</b></h5>
</div><div><ul><li>Bachelor&rsquo;s/Master&rsquo;s Degree in Computer Science, Computer Engineering or any related subject.
</li><li>Experience in IT service management of systems Technical Design, Implementation, and Maintenance on wide variety of platform including the main banking platform.
</li><li>At least 15 year&rsquo;s experience in a major bank of which at least 5 years in bank in a managerial capacity in an IT Security engineering or architecture function.
</li></ul><p>- Training courses and certifications in application development, database administration, security, and management is a plus. Professional certifications, an ITIL foundation, TOGAF and COBIT is a must - Professional certification such as CISSP, CISM, CISA is preferred.</p>
</div></div><div><div><h5 class="jobSectionHeader"><b>Note: you will be required to attach the following:</b></h5>
</div><div><div><ul><li>Resume/CV</li></ul>
<ul><li>Copy of Passport or QID
</li></ul><ul><li>Copy of Education Certificate
</li></ul><ul><li>Copy of Birth Certificate</li></ul></div></div></div></div></div><div></div>

Senior Vice President Cyber Security Strategy and Product Management

Optiv

<div><p><b>This position is field-based and will be hired in the N. Texas Area</b></p><p></p><p>
As an Account Manager or Client Manager (CM) as we call it, you'll be responsible for selling Optiv security services and security technology solutions to a select few strategic accounts (typically less than 20) within a geographic territory. You'll also be responsible for owning and coordinating all aspects of the sales cycle within your assigned accounts, and leading a cross-functional team to build and execute a multi-year strategic account management plan for your top accounts. Members of this cross-functional team will typically include a Solutions Architect, Client Operations Specialist and services practices personnel as appropriate for your accounts.</p><p></p><p>
Development of a multi-year strategic account management plan for your top accounts is a core responsibility for the CM. You'll identify and understand your client's core security concerns and how they correlate to Optiv solutions that mitigate these cybersecurity risks. Based upon this understanding of the client, you'll bring together appropriate Optiv technical, services and leadership personnel to collaborate with your top account client leadership to refine and/or build a security strategy, and subsequently develop and propose solutions to address client security needs. In many cases this will take the form of security technology and services solutions, and as appropriate for the client, large and complex solutions comprised of security management consulting, hardware and software security technologies, advisory, implementation and support services, and managed security services. An overarching goal is to establish a trusted relationship with the client that results in Optiv being their primary security solution partner and provider.</p><p></p><p>
You'll also engage clients with a heightened focus on ever-enhancing client satisfaction. This will include meeting with your top clients early in the year to understand and document their business, technology and security goals, as well as client expectations of Optiv in support of attaining those goals. You'll review these goals, expectations and progress with your top clients quarterly, engaging Optiv leadership and resources as necessary to ensure you and Optiv are on track to achieve or exceed these client-defined goals.</p><p></p><p>
How you&rsquo;ll make an impact:</p><div><ul><li><br>
Build trusted, effective and productive relationships with client executives within assigned accounts.</li><li>Lead creation of multi-year strategic account management plans, for top accounts, based upon identified client business, technology and security goals, coupled with Optiv's understanding of security trends, threats and points of view for each assigned account.</li><li>Build a large sales pipeline, ideally 4 times assigned targets, within assigned accounts and achieve/exceed assigned gross margin target.</li><li>Manage current and multi-quarter forecasts with a high-degree of accuracy, currency and integrity.</li><li>Execute with discipline and in alignment with Force Management principles including MEDDICC and Command of the Message, among others.</li><li>Effectively communicate Optiv&rsquo;s value proposition as it relates to security services and technologies expertise and capabilities.</li><li>Build strong, collaborative and productive relationships with technology partners and their respective sales personnel to both gain and share leads in support of building qualified pipeline and maximizing mutually beneficial sales opportunities.</li><li>Initiate and / or monitor and mediate all necessary communications between clients, technology partners and members of the extended Optiv team (technical, sales, client operations, etc.) within each assigned account.</li><li>Maintain collaborative and effective internal communications with Optiv team members relative to specific opportunities, associated requirements and client satisfaction.</li></ul></div><p><br>
What we&rsquo;re hiring for:</p><div><ul><li><br>
Experience in product or services based sales typically gained over 2-3 years, ideally in a technology company.</li><li>Proven ability to build and execute territory and account prospecting and expansion plans with a track record of exceeding assigned quotas.</li><li>Experience engaging cross-functional resources such as sales, pre-sales technical support, and other support personnel in an effective fashion.</li><li>Demonstrated ability to build productive business relationships with key executives and sponsors within assigned accounts.</li><li>Effective presentation, verbal and written communication skills.</li><li>Negotiation experience</li><li>History of demonstrated achievement exceeding plan and expectations.</li><li>Strong business acumen and ability to correlate business goals with business and cyber security risk in support of developing complex security technology and services solutions.</li><li>Experience in building and selling complex and multi-year hardware, software, services and financing solutions to Fortune 1000 clients.</li><li>Experience in and knowledge of the IT Infrastructure market and competitors.</li><li>Experience in and knowledge of the IT security market and competitors.</li><li>Experience in and knowledge of the Risk &amp; Compliance market and competitors.</li><li>Experience selling management consulting services.</li></ul></div><p></p><p><b><br>
What you can expect from Optiv</b></p><ul><li><p>
A company committed to our inclusive value through our Employee Resource Groups</p></li><li><p>
Work/life balance</p></li><li><p>
Professional training resources</p></li><li><p>
Creative problem-solving and the ability to tackle unique, complex projects</p></li><li><p>
Volunteer Opportunities. &ldquo;Optiv Chips In&rdquo; encourages employees to volunteer and engage with their teams and communities.</p></li><li><p>
The ability and technology necessary to productively work remotely/from home (where applicable)</p></li></ul><p></p><p><b>
EEO Statement</b></p><p>
Optiv is an equal opportunity employer. All qualified applicants for employment will be considered without regard to race, color, religion, sex, gender identity or expression, sexual orientation, pregnancy, age 40 and over, marital status, genetic information, national origin, status as an individual with a disability, military or veteran status, or any other basis protected by federal, state, or local law.</p><p></p><p>
Optiv respects your privacy. By providing your information through this page or applying for a job at Optiv, you acknowledge that Optiv will collect, use, and process your information, which may include personal information and sensitive personal information, in connection with Optiv&rsquo;s selection and recruitment activities. For additional details on how Optiv uses and protects your personal information in the application process, click here to view our Applicant Privacy Notice. If you sign up to receive notifications of job postings, you may unsubscribe at any time.</p></div>

Account Manager - Cyber Security - N. Texas

Marriott Vacations Worldwide

<div><ul><li><b>Relocation assistance provided</b></li></ul><p><b><br>
Job </b><b>Summary</b></p><p></p><p>
The <b>AVP, Cyber Security Operations</b> will be responsible for leading the design, implementation, and continuous enhancement of the organization&rsquo;s security operations capabilities. This role will focus on developing a Security Operations Center (SOC) that ensures proactive monitoring, threat detection, and swift incident response to safeguard the organization&rsquo;s critical infrastructure and digital assets. The individual will be tasked with establishing a robust threat intelligence program that integrates real-time threat data, analysis, and strategic insights to anticipate emerging risks and inform decision-making. A key aspect of this role is creating and nurturing operational processes that allow the SOC to function seamlessly across complex, hybrid environments, including cloud and on-premises systems.</p><p></p><p>
This leader will be responsible for managing advanced security tools such as SIEM, SOAR, EDR, and threat intelligence platforms, and will leverage these tools to automate workflows, improve incident response times, and drive threat analysis. The role will ensure that security operations are continuously evolving to meet the latest threat landscapes, using an intelligence-driven approach to preemptively mitigate risks. The individual will be instrumental in driving the organization&rsquo;s security incident management framework, ensuring effective resolution, reporting, and post-incident reviews that contribute to future risk mitigation.</p><p></p><p>
Additionally, the position collaborates closely with business and IT leaders to ensure that security operations are aligned with organizational goals and risk management strategies. This role will also involve working with regulatory and compliance teams to ensure adherence to industry standards, data protection regulations, and cybersecurity best practices.</p><p></p><p><b>
Expected </b><b>Contributions</b></p><p></p><ul><li><b>
SOC Leadership and Optimization: </b>Leads the continuous improvement and optimization of the Security Operations Center (SOC) to ensure that it is capable of effectively detecting and responding to both external and internal threats. This includes refining SOC processes, tools, and workflows to ensure operational efficiency and responsiveness to security incidents across hybrid environments.</li><li><b>
Threat Intelligence Integration:</b> Develops and operationalizes a comprehensive threat intelligence program that enhances situational awareness and empowers the SOC with actionable insights. This includes integrating external threat intelligence feeds, leveraging internal threat data, and fostering collaboration with industry groups and threat-sharing communities to stay ahead of emerging threats.</li><li><b>
Incident Response Management:</b> Oversees the development and execution of incident response plans, ensuring they are tested, documented, and continuously improved. Leads high-impact incident response efforts, coordinating with relevant stakeholders to contain, remediate, and recover from security incidents. Ensures post-incident reviews are conducted to identify gaps and improve the organization&rsquo;s overall security posture.</li><li><b>
Security Automation and Orchestration:</b> Spearheads the integration of automation and orchestration tools, such as Security Orchestration, Automation, and Response (SOAR) platforms, to streamline and accelerate security operations. Focuses on automating repetitive tasks, improving response times, and reducing manual effort to increase operational efficiency within the SOC.</li><li><b>
Security Metrics and Reporting:</b> Establishes key performance indicators (KPIs) and metrics to measure the effectiveness of the security operations function. Provides regular updates and executive reporting on security operations performance, including threat detection, incident response timelines, and overall security posture. Uses data to drive improvements and ensure alignment with the organization&rsquo;s risk management strategy.</li><li><b>
Cross-functional Collaboration:</b> Works closely with technology, legal, compliance, privacy, and business leadership to ensure that security operations are aligned with overall business objectives and regulatory requirements. Facilitates the integration of security considerations into all aspects of the organization&rsquo;s technology infrastructure and processes.</li><li><b>
Team Development and Mentorship:</b> Fosters a high-performance culture within the security operations team through mentorship, training, and leadership. Supports career development and skills growth for team members, ensuring they are equipped with the latest knowledge and tools to handle evolving threats. Builds a culture of continuous learning to keep the team ahead of the curve in security operations and threat management.</li><li><b>
Risk and Compliance Alignment:</b> Ensures that the security operations function meets relevant regulatory requirements and aligns with industry standards (e.g., NIST, ISO 27001, GDPR). Works with compliance and legal teams to ensure that incident response efforts, threat intelligence, and SOC activities support the organization&rsquo;s broader compliance goals.</li><li><b>
Technology and Tool Selection:</b> Evaluates, selects, and implements security technologies that support the security operations program. This includes SIEM, EDR, threat intelligence platforms, and other tools that enhance detection, monitoring, and response capabilities. Ensures these tools are integrated seamlessly into the organization&rsquo;s broader security architecture.</li></ul><p></p><p><b>
Candidate </b><b>Profile</b></p><p></p><p><b>
Education</b></p><ul><li>
Bachelor of Science (BS) degree that is technology based in information technology, engineering, computer science, or statistical/math sciences required.
</li><li>Master&rsquo;s degree, e.g., MBA or in Computer Science, preferred.</li></ul><p></p><p><b>
Certifications Preferred</b></p><ul><li>
Advanced certifications such as CISSP, CISM, GIAC (e.g., GCIA, GCFA, GCIH), or CEH preferred.</li></ul><p></p><p><b>
Experience</b></p><ul><li>
At least ten years of progressive experience in relevant Information Security positions.</li><li>
At least six years of experience in a security engineering role or a similar position or having equivalent skills and experience
</li><li>Proven experience managing hybrid SOCs (in-house and MSSPs), and leading global or enterprise-scale security operations.</li><li>
Demonstrated expertise with tools and technologies such as SIEM, SOAR, EDR, and threat intelligence platforms.</li><li>
Experience managing incidents and crises in dynamic environments.</li></ul><p></p><p><b>
Skills/Attributes</b></p><ul><li>
Deep understanding of incident response methodologies, threat detection, and forensics practices.</li><li>
Expertise in modern IT architectures, including hybrid cloud environments, containers, and APIs.</li><li>
Strong knowledge of security frameworks and standards (e.g., NIST CSF, MITRE ATT&amp;CK, ISO 27001).</li><li>
Exceptional analytical and critical thinking skills with the ability to make critical decisions under pressure.</li><li>
Strong leadership, collaboration, and interpersonal skills, with the ability to influence at all levels of the organization.</li><li>
Effective communicator with the ability to translate complex technical details into actionable insights for diverse audiences.</li><li>
Ability to develop and mentor security operations teams, fostering a culture of continuous learning, skill development, and high-performance standards to stay ahead of evolving threats.</li></ul><p></p><p>
Marriott Vacations Worldwide is an equal opportunity employer committed to hiring a diverse workforce and sustaining an inclusive culture.</p></div>

AVP, Cyber Security Operations*

Wells Fargo

<div><b>About this role:</b><br>
<br>
Wells Fargo is seeking an Assistant General Counsel, Vice President, as part of the Cybersecurity Legal Team within the Technology Law Division with tangible expertise and experience in U.S. and global cybersecurity and privacy laws, rules, and regulations.<br>
<br>
For additional information on this line of business, refer to the external Careers Site at Wellsfargo.com/career.<br>
<br>
Assistant General Counsel, Vice President will provide legal support and advice to the Chief Information Security Office and the Enterprise Business Resiliency Office, including the Enterprise Incident Management team. This individual will serve as a trusted legal advisor and strategic partner in the supported functions.<br>
<br>
<b>In this role, you will:</b><ul><li>
Lead complex initiatives with broad impact and act as a key participant in large scale planning</li><li>
Handle matters that have a significant impact on the Company's operations, strategies, or profitability</li><li>
Provide legal advice on matters for management of the Corporation and its subsidiaries</li><li>
Serve as a legal advisor to the businesses within Wells Fargo</li><li>
Review and analyze complex large scale or long-term challenges that require in-depth evaluation of multiple factors including intangibles or unprecedented factors</li><li>
Represent of the Company in highly complex litigation, negotiations, settlement discussions, and claims related legal issues</li><li>
Manage highly complex claims and litigation</li><li>
Draft complex legal documents, review and negotiate documents prepared by outside counsel</li><li>
Identify and analyze complex legal issues, develop conclusions, and make recommendations for issue resolution</li><li>
Provide substantive legal advice on matters for more experienced management of the Corporation</li><li>
Develop and lead implementation of strategic business initiatives, and lead work team to meet deliverables and drive new initiatives</li><li>
Educate, train, and supervise less experienced attorneys within the Legal department</li><li>
Collaborate strategically with peers, colleagues, and mid-level to more experienced managers to resolve issues and achieve goals</li><li>
Lead projects, teams or serve as a peer mentor</li><li>
Develop relationships with and provide guidance to more experienced leadership, including executive officers, on issues that may present legal, regulatory, compliance, or reputational risk to the Company</li><li>
Partner with business leaders and management of other corporate departments to develop and implement risk management programs</li></ul><b>
Required Qualifications:</b><ul><li>
5+ years of Law experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education</li><li>
Active State Bar membership or the equivalent in a country outside the United States</li></ul><b>
Desired Qualifications:</b><ul><li>
Experience as a practicing attorney in global financial services cybersecurity laws, regulations, and best practices, and in particular an understanding of the FFIEC, CFTC, NYDFS Cybersecurity Regulation, NIST 800-53, NIST Cyber Framework, ISO, and PCI compliance as it relates to banks.</li><li>
Experience with data breach and incident response investigations</li><li>
Experience working on policy issues related to cybersecurity, investigations, threat sharing, and privacy as it intersects with cybersecurity</li><li>
Experience working with law enforcement and national security authorities</li></ul><b>
Job Expectations:</b><ul><li>
Position requires an onsite presence in any of the posted locations.</li><li>
This position offers a hybrid work schedule.</li><li>
Ability to travel up to 10% of the time.</li><li>
Relocation assistance is not available for this position.</li><li>
This position is not eligible for Visa sponsorship.</li></ul><b>
Pay Range</b><br>
<br>
Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.<br>
$159,000.00 - $305,000.00<br>
<b>Benefits
</b><br>
<br>
Wells Fargo provides eligible employees with a comprehensive set of benefits, many of which are listed below. Visit Benefits - Wells Fargo Jobs for an overview of the following benefit plans and programs offered to employees.<ul><li>
Health benefits</li><li>
401(k) Plan</li><li>
Paid time off</li><li>
Disability benefits</li><li>
Life insurance, critical illness insurance, and accident insurance</li><li>
Parental leave</li><li>
Critical caregiving leave</li><li>
Discounts and savings</li><li>
Commuter benefits</li><li>
Tuition reimbursement</li><li>
Scholarships for dependent children</li><li>
Adoption reimbursement</li></ul><b>
Posting End Date:</b><br>
14 Apr 2026<br>
<ul><li><b>Job posting may come down early due to volume of applicants.
</b></li></ul><br>
<b>We Value Equal Opportunity</b><br>
<br>
Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.<br>
<br>
Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements.<br>
<br>
<b>Applicants with Disabilities</b><br>
<br>
To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo .<br>
<br>
<b>Drug and Alcohol Policy</b><br>
<br>
Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.<br>
<br>
<b>Wells Fargo Recruitment and Hiring Requirements:</b><br>
<br>
a. Third-Party recordings are prohibited unless authorized by Wells Fargo.<br>
<br>
b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.</div>

Assistant General Counsel, VP : Cybersecurity

Search 7312+ Cyber security manager jobs near you this June. New roles added regularly across leading industries. Apply today.