Manager - Cybersecurity
Leads Air Arabia's enterprise cybersecurity strategy, operations, and governance, managing a security team, SOC, incident response, risk assessments, and compliance across on-prem and cloud environments (AWS, Azure, Oracle, Kubernetes) plus Windows/Linux servers and enterprise databases. Requires 8+ years IT security experience with 3+ in management.
- Compensation
- Not disclosed
- Location
- Sharjah, AE
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 3+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelor's degree in cybersecurity, Information Technology, or related field
- CISSP, CISM, CISA, CEH, CCSP, or equivalent industry certifications
- Fluent in English
- Strong background securing Windows/Linux servers, cloud (AWS, Azure, Oracle), and enterprise networks
- Knowledge of enterprise databases (Oracle, PostgreSQL, MSSQL, MySQL, CouchDB) and their security best practices
- Excellent communication and stakeholder engagement skills
- 8+ years of IT security experience with at least 3+ years in a managerial role
- Hands-on experience with Kubernetes security, container hardening, and cloud-native security tools
- Proven track record in leading incident response and crisis management
Nice to have
- Master's degree
- Cloud security certifications (AWS Security Specialty, Azure Security Engineer, Oracle Security)
- Kubernetes Security Specialist (CKS) certification
Full description
Job Purpose
The Manager of Cyber Security is responsible for leading the enterprise cyber security strategy, operations, and governance across on-premises and cloud environments. This role oversees a dedicated cyber security team responsible for protecting infrastructure (Windows/Linux servers, cloud platforms: Oracle, AWS, Azure, Kubernetes clusters, enterprise networking, and databases such as Oracle, PostgreSQL, MSSQL, MySQL, CouchDB). The Manager ensures compliance with industry regulations, reduces cyber risks, and implements proactive security measures to safeguard critical business systems and data.
Key Result Responsibilities
Strategic & Governance
- Develop and implement the organization’s cyber security roadmap aligned with business and regulatory requirements.
- Establish security policies, standards, and procedures across infrastructure, cloud, and application environments.
- Collaborate with the Manager of Cloud & Infrastructure Services or Technology Infrastructure Manager to embed security into system and network architecture.
- Manage security budgets, vendor relationships, and third-party risk assessments.
- Ensure compliance with standards such as ISO 27001, NIST, GDPR, HIPAA, or local regulatory requirements.
Operational Security
- Oversee Security Operations Centre (SOC) activities, including monitoring, threat detection, and incident response.
- Manage vulnerability assessments, penetration testing, and remediation plans.
- Implement and maintain security controls for servers, networks, cloud services, Kubernetes, and databases.
- Lead incident response and forensic investigations, ensuring timely resolution and root cause analysis.
- Ensure strong identity and access management (IAM), privilege escalation control, and zero-trust practices.
Key Result Responsibilities-Continued
Risk Management & Assurance
- Conduct regular risk assessments and security audits across IT infrastructure and applications.
- Manage enterprise endpoint protection, intrusion detection/prevention (IDS/IPS), and SIEM platforms.
- Drive awareness and training programs to promote a strong cyber security culture across the organization.
- Oversee data protection measures, encryption standards, and backup/recovery procedures.
Team Leadership
- Lead and mentor a dedicated cyber security team including analysts, engineers, and incident responders.
- Define KPIs and success metrics for cyber defence and resilience.