Cyber Strategy & Resilience Director

Bank Muscat; Muscat; On-site; OMR 120,000 - 180,000; Full time

Job summary

Bank Muscat in Muscat is seeking Head of Cyber Strategy and Resilience to lead the organization’s cyber strategy, security investment portfolio, third-party cyber risk, and remediation governance.

You will translate enterprise priorities into a funded multi-year roadmap, oversee resilience capabilities, crises, and ensure services can withstand significant cyber disruption. Strong leadership and regulatory-aligned risk management are essential.

Qualifications

• Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Information Technology, Engineering or related discipline.
• 10–15 years of experience, including at least 5 years in cyber leadership, strategy, resilience or portfolio governance.
• Demonstrated experience in a regulated, high-availability or financial-services environment is strongly preferred.

Responsibilities

• Own the cyber strategy, target-state operating model and multi-year roadmap, and lead the annual strategy refresh cycle.
• Govern portfolio prioritization, business cases, benefits, dependencies, OpEx and CapEx, and provide executive-level performance reporting.
• Maintain the cyber resilience strategy and crisis-management framework and oversee exercises, cyber recovery readiness and lessons learned.
• Oversee the first-line third-party cyber risk programme and ensure supplier risks are assessed and treated through the procurement lifecycle.
• Establish central remediation governance, risk-based prioritization and escalation for overdue or SLA-breaching security issues.
• Set objectives, service measures and accountability across strategy, resilience, remediation and third-party risk teams.

Skills

Cyber strategy

Portfolio governance

Executive reporting

Third-party risk

Crisis management

Education

Bachelor’s degree in Information Security or related

Master’s degree advantageous

Job description

Bank Muscat in Muscat is seeking Head of Cyber Strategy and Resilience to lead the organization’s cyber strategy, security investment portfolio, third-party cyber risk, and remediation governance.

You will translate enterprise priorities into a funded multi-year roadmap, oversee resilience capabilities, crises, and ensure services can withstand significant cyber disruption. Strong leadership and regulatory-aligned risk management are essential.