Cybersecurity Manager - Metro

Role Overview

Cybersecurity Manager - Metro at Egis Group. This role is responsible for the operational management of cybersecurity infrastructure, incident response, and protection technologies for Project information and process systems and applications.

Role Purpose

To ensure the confidentiality, integrity, and availability of corporate and client data across all computer workstations, servers, and local area networks by managing operational cybersecurity tasks, mitigating threats and vulnerabilities, and overseeing the secure operation of security equipment and systems.

Key Responsibilities

Account Administration & Operations

• Manage operational tasks for account administration, eDiscovery, and incident response.
• Maintain user accounts and upgrade systems and software as required.
• Oversee the secure operations of security equipment.
• Ensure secure transmission of sensitive unclassified information.
• Protect cryptographic principles and methods.

Security Systems & Infrastructure

• Develop, maintain, and audit the analytical and technical aspects of major computer security systems.
• Conduct operations of computer protection measures.
• Oversee the client/server/infrastructure group on appropriate procedures for computer and system security.
• Implement cyber security and protection technologies for Project information and process systems and applications.

Threat Mitigation & Incident Response

• Mitigate threats and vulnerabilities associated with potentially compromising corporate and client data.
• Oversee the investigation of computer security incidents.
• Act as an assistant for cyber security initiatives.
• Provide technical support and timely computer system data recovery to end-users.
• Provide training to end-users on cybersecurity practices.

Vulnerability Assessment & Compliance

• Create measurement tools for system vulnerability assessments.
• Develop, maintain, and audit security auditing practices.
• Support compliance frameworks and regulatory requirements.

Stakeholder & Supplier Management

• Act as contact with suppliers to develop technical solutions for computer security needs.
• Make recommendations to management on security improvements.
• Serve on project teams and internal committees to represent cyber security interests.

Qualifications & Experience

• 15+ years of professional experience in cybersecurity roles.
• At least 5 years in a senior or leadership capacity.
• Advanced knowledge of network security, threat analysis, and incident response procedures.
• Strong understanding of security protocols, vulnerability management, and risk assessment methodologies.
• Experience with security auditing, compliance frameworks, and regulatory requirements.
• Demonstrated expertise in firewall configuration, network segmentation, and access control implementation.
• Experience with digital forensics and malware analysis (preferred).
• Knowledge of cybersecurity requirements specific to the Middle East region (preferred).
• Familiarity with local Saudi Arabian compliance standards and regulations (preferred).

Skills & Competencies

• Proficiency with security tools and platforms, including firewalls, SIEM systems, and intrusion detection systems.
• Proficiency in firewall configuration, network segmentation, and access control implementation.
• Excellent analytical and problem-solving skills with the ability to make decisive security decisions.
• Strong organizational and project management capabilities.
• Proficiency in security documentation and technical report writing.
• Experience with cloud security platforms and hybrid security architectures (preferred).
• Knowledge of penetration testing and ethical hacking methodologies (preferred).
• Familiarity with security information and event management (SIEM) tools (preferred).
• Understanding of encryption technologies and data protection mechanisms (preferred).

Additional Information

Certifications & Domain Expertise

• CISSP (Certified Information Systems Security Professional) or equivalent certification (preferred).
• CEH (Certified Ethical Hacker) or similar advanced security certification (preferred).
• CCNA Security or comparable networking security certification (preferred).
• Domain expertise in enterprise security, information security management, and risk management.