The Cybersecurity Operations Manager is responsible for leading the organization's Security Operations Services Department (SOS). The role provides technical and operational leadership to ensure effective security monitoring, incident response, offensive security assessments, cyber threat intelligence, vulnerability management, and regulatory compliance. The Cybersecurity Operations Manager works closely with executive management to implement the organization's cybersecurity strategy while ensuring the delivery of high-quality security services to internal and external customers.
II- Duties & Responsibilities:
1. Strategic Leadership
a. Develop, implement, and maintain the organization's cybersecurity strategy in alignment with business objectives.
b. Establish and maintain cybersecurity governance, policies, standards, procedures, and security frameworks.
c. Advise executive management on cybersecurity risks, emerging threats, and program performance.
d. Promote continuous improvement of the organization's security posture.
2. Team Management & Cybersecurity Operations Leadership
a. Lead cybersecurity teams and align operations with business and security objectives.
b. Provide strategic and operational direction, ensuring teams have the resources, skills, and capabilities to succeed.
c. Oversee cybersecurity processes, frameworks, monitoring, threat response, vulnerability management, and compliance activities.
d. Establish governance, metrics, and reporting to measure performance and improve security maturity.
e. Coordinate risk management, audits, regulatory compliance, and security improvement initiatives.
f. Promote collaboration, knowledge sharing, and continuous development across cybersecurity teams.
3. Incident Response & Crisis Management
a. Direct the response to major cybersecurity incidents and coordinate activities across technical and business teams.
b. Lead post-incident reviews, root cause analysis, and implementation of corrective actions.
c. Maintain effective communication with management, customers, and external stakeholders throughout incident response activities.
4. Leadership & Stakeholder Collaboration
a. Lead, mentor, develop, and evaluate the performance of SOS Units.
b. Foster a culture of collaboration, accountability, continuous learning, and professional development.
c. Build strong working relationships with internal departments, customers, vendors, and industry partners.
d. Represent the organization in cybersecurity meetings, technical forums, and client engagements.
5. Continuous Improvement:
a. Monitor emerging cyber threats, attack techniques, and security technologies.
b. Evaluate and implement security tools and operational improvements to enhance organizational resilience.
c. Promote security awareness and cybersecurity best practices across the organization.
6. Business Development consultation:
a. Provide technical cybersecurity expertise during presales activities, including RFPs, RFIs, and customer security assessments.
b. Support solution design to ensure security requirements are integrated into customer engagements.
c. Participate in client meetings and presentations to demonstrate the organization's cybersecurity capabilities.
III- Position Expectation:
· Provide effective technical leadership and strategic direction.
· Demonstrate proactive risk management and sound decision-making.
· Communicate effectively with executives, customers, and technical teams.
· Promote collaboration, innovation, adaptability, and ethical conduct.
· Regularly update senior management and the board on the state of the information security program, important risks, and ongoing activities.
· Hold regular team meetings to share information, prioritize tasks, and resolve any issues or concerns.
· Manage the department budget and optimize resource allocation.
· Take ownership of and be accountable for monitoring and achieving departmental KPIs.
· Support the development of internal security tools and contribute to the design and delivery of new cybersecurity tools and services for the company.
IV- Skills and Qualifications:
Education & Certifications
· Master’s degree in Computer Science, Information Security, or a related field.
· Preferred certifications: CISSP, CISM, CEH, CRISC, or equivalent.
Experience
· 10+ years of cybersecurity experience, including leadership roles.
· Strong background in SOC management, incident response, Red Teaming, GRC, and security strategy development.
Technical Expertise
· Strong knowledge of SIEM, IDS/IPS, firewalls, EDR, vulnerability management, and cloud security.
· Experience with security frameworks and standards including NIST, ISO 27001, GDPR, SAMA, NCA, and NDPR.
Core Competencies
· Strong leadership, team management, and mentoring skills.
· Advanced cybersecurity knowledge with the ability to adopt new technologies quickly.
· Excellent problem-solving, communication, and stakeholder management abilities.
