Our client is seeking an experienced Information Security Manager to lead and strengthen their cybersecurity operations across the region. This is a critical role where you will be responsible for managing the overall security operations framework - covering threat detection, incident response, vulnerability management, and compliance while working closely with IT, engineering, and risk stakeholders.

Key Responsibilities

1. Security Operations & Incident Management

• \tLead the Security Operations Center (SOC) to monitor, detect, and respond to cybersecurity threats and incidents.

• \tManage security solutions such as SIEM, EDR, and IDS/IPS to enhance visibility and response capabilities.

• \tOversee and coordinate incident response activities including investigation, containment, recovery, and post-incident review.

2. Vulnerability & Threat Management

• \tConduct and manage regular vulnerability assessments and penetration testing.

• \tCollaborate with internal teams to ensure timely remediation of security gaps.

• \tTrack and assess evolving threats and proactively implement preventive measures.

3. Security Compliance & Risk Governance

• \tEnsure compliance with relevant standards and frameworks such as PCI DSS, MAS TRM, and GDPR.

• \tSupport internal/external audits and regulatory reviews.

• \tMaintain and update cybersecurity policies, standards, and documentation.

4. Training & Cross-Functional Collaboration

• \tDrive security awareness training across the organization.

• \tPartner with DevOps/engineering teams to embed security practices into CI/CD pipelines.

• \tLiaise with vendors, regulators, and external partners on security-related matters.

Key Requirements

• \tBachelor's degree in Cybersecurity, Computer Science, or a related discipline.

• \tAt least 5 years of experience in cybersecurity, with 2+ years in a leadership or SOC management role.

• \tHands-on experience with modern security tools including SIEM (Splunk, Sentinel), EDR, firewalls, and cloud security platforms (AWS, Azure, GCP).

• \tSolid knowledge of incident handling, threat intelligence, malware analysis, and digital forensics.

• \tFamiliarity with financial sector regulations such as PCI DSS and MAS TRM is highly preferred.

• \tStrong leadership, stakeholder engagement, and communication skills.