Cybersecurity Manager

About the role

The Cybersecurity Manager leads and oversees the organisation's cybersecurity operations, governance, risk management and compliance functions. The role drives cybersecurity programmes, manages security operations and incidents, oversees cybersecurity reporting, asset management and third-party risk management, and supports the Agency Chief Information Security Officer (ACISO) in strengthening the agency's cybersecurity posture.

Responsibilities

• Lead and manage cybersecurity operations, governance, risk management and compliance activities across the organisation.
• Oversee cybersecurity incident management, investigations, response, recovery and post-incident improvement activities.
• Manage cybersecurity programmes, including vulnerability management, cybersecurity asset management, third-party risk management, security monitoring and compliance activities.
• Monitor the organisation's cybersecurity posture and drive remediation of identified risks, vulnerabilities and security findings.
• Review and oversee cybersecurity assessments, security testing, risk assessments and assurance activities.
• Oversee cybersecurity metrics, scorecards, dashboards, management reports and compliance submissions.
• Provide cybersecurity advisory and oversight for projects, systems, cloud environments and technology initiatives.
• Collaborate with stakeholders, system owners, vendors, auditors and external agencies to address cybersecurity risks and requirements.
• Lead cybersecurity capability development, continuous improvement and operational resilience initiatives.

Requirements

• Degree in Cybersecurity, Information Technology, Computer Science, Engineering or a related discipline.
• At least five years of relevant experience in cybersecurity, information security, IT security, risk management, governance, compliance or security operations.
• Experience leading cybersecurity programmes, projects or operational security functions.
• Good understanding of cybersecurity principles, technologies, governance frameworks, risk management, incident response, cloud security and industry best practices.
• Strong leadership, stakeholder management, analytical, problem-solving and communication skills.
• Ability to manage multiple stakeholders and cybersecurity initiatives in a dynamic environment.
• Relevant professional certifications such as CISSP, CISM, CRISC, ISO/IEC 27001 Lead Implementer or Lead Auditor, or equivalent, will be an advantage.