Cybersecurity Operation Manager

Job brief:

The Cybersecurity Operations Manager is responsible for overseeing and managing the daily operations of an organization's cybersecurity infrastructure and systems. They play a critical role in ensuring the effectiveness, efficiency, and continuous improvement of cybersecurity operations while aligning with business objectives and industry best practices.

Functions and Responsibilities:

• Manage and lead the cybersecurity operations team, including hiring, training, and performance management.
• Develop and maintain operational procedures, standards, and guidelines to ensure consistent and effective execution of cybersecurity operations.
• Oversee the implementation and maintenance of security monitoring tools and technologies to detect and respond to security incidents.
• Monitor security alerts and logs, conduct investigations, and perform forensic analysis to identify and mitigate security incidents.
• Collaborate with incident response teams to coordinate and lead incident response activities, including containment, eradication, and recovery.
• Conduct post-incident reviews to identify lessons learned and recommend improvements to prevent future incidents.
• Oversee the design, implementation, and maintenance of the organization's cybersecurity infrastructure, including firewalls, intrusion detection/prevention systems (IDS/IPS), security information and event management (SIEM) systems, and endpoint protection systems.
• Collaborate with IT teams and vendors to ensure the availability, reliability, and integrity of cybersecurity systems and technologies.
• Stay up to date with the latest cybersecurity technologies and solutions and make recommendations for their adoption.
• Conduct regular reviews and assessments of the cybersecurity infrastructure to identify vulnerabilities and recommend improvements.

Qualifications:

• Bachelor's / master's degree in cybersecurity, information technology, computer science, or a related field.
• Minimum of (5-7) years of related experience.
• Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC) are highly desirable.
• Proven experience in cybersecurity operations, including managing security infrastructure, incident response, and vulnerability management.
• Experience in developing and implementing incident response plans, coordinating incident response activities, and leading incident response efforts during cybersecurity incidents
• Familiarity with security monitoring tools such as SIEM (Security Information and Event Management) systems.

Skills:

• Proficiency in scripting and automation languages such as Python, PowerShell, or Bash.
• Strong leadership and team management skills, including hiring, training, and performance management.
• In-depth knowledge of networking protocols, operating systems, and security technologies.
• Experience with incident response methodologies and best practices.
• Knowledge of vulnerability management and patch management processes.
• Familiarity with SOC operations, including managing security analysts, monitoring security events and alerts.
• Excellent analytical and problem-solving skills.