Job DescriptionTo design the standards for cybersecurity so that Bupa Arabia can grow and transform its business with security built in from the start.
Key Accountabilities:
1 - Cybersecurity Strategy & Roadmap:
- * Draft and maintain the cybersecurity strategy in line with business priorities, risk appetite and the CISO’s direction.
- Build and maintain the multi-year roadmap, setting out investment priorities, outcomes, dependencies and owners.
- Monitor the external threat, regulatory and technology landscape and recommend strategic adjustments.
2 - Enterprise Security Architecture:
- * Develop and maintain the target-state security architecture, technical standards and reference patterns across all environments.
- Conduct design-stage architecture reviews of major initiatives and security engineering changes.
- Assess architecture exceptions and technical debt, submitting material exceptions for risk review and CISO approval.
3 - Transformation & Portfolio Alignment:
- * Apply cybersecurity requirements and architecture guardrails to transformation, technology planning and delivery projects.
- Work with business, technology, data, cloud and procurement teams to shape secure solution options early.
- Recommend cybersecurity initiative and investment priorities based on business value, risk reduction and architectural fit.
4 - Cybersecurity Delivery:
- * Manage delivery of prioritized cybersecurity initiatives from planning through implementation, in line with the approved strategy.
- Coordinate delivery teams, partners and stakeholders, managing scope, milestones, resources, budgets and risks.
- Confirm operational handover with Cyber Security Operations, track benefits realization and escalate material issues to the CISO.
5 - Performance, Insights & Executive Reporting:
- * Track outcome measures for strategy execution and architecture adoption.
- Prepare progress reports on strategy delivery, investment performance and decisions required.
- Provide strategy and architecture input to the CISO’s leadership, Board and regulatory reporting.
6 - Stakeholder Management:
- * Maintain effective working relationships with technology, risk, business and subsidiary stakeholders.
- Engage business and technology stakeholders early to align cybersecurity priorities, roadmaps and delivery.
- Coordinate with BISOs across functions and subsidiaries to promote consistent security practices.
- Review draft cybersecurity policies for technical feasibility and support the CISO in governance forums.
Skills
- * Communication skills
- 8 years of experience
- Risk based approach
- Strategic thinking
- Adherence to confidentiality of data
- Multitasking
- Understand Risk assessment and management methodology.
- Experience in developing and implementing enterprise governance, risk, and compliance strategy and solutions.
- Experience in Security project management and planning.
- Bachelor’s degree in Information Technology or Cybersecurity (required)
- Master’s degree in Information Security or Cybersecurity (preferred)
- Certification in information security domain.
- CISSP
- CISA
- SABSA Foundation
- ISSAP
- Experience in information security
- Experience in cloud-based platforms (AWS, Azure, Google Cloud) in an enterprise environment
- Knowledge of Cyber and cloud security standard frameworks, architecture, design, operations, controls, technology, solutions, and service orchestration.
Education
Bachelor’s degree in Information Technology or Cybersecurity
