Cybersecurity Manager

Gender; Dhofar; On-site; OMR 90,000 - 120,000; Full time

Job summary

Gender seeks a senior cybersecurity leader to direct the organization’s information security program across IT, ICT, OT, ICS, and SCADA. You will develop strategy, governance, risk management, and incident response, ensuring regulatory compliance and resilience across critical infrastructure.

Responsibilities include leading security operations, managing third-party cyber risk, and shaping security architecture and controls throughout project lifecycles.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Software Engineering, or equivalent.
• 9 years of experience in cybersecurity, security regulations, network and cybersecurity, information security, or related IT discipline.
• Experience working in ICT and OT environments.
• At least 2 years of leadership or managerial experience.

Responsibilities

• Develop and implement cybersecurity strategy aligned with corporate objectives.
• Establish and manage cybersecurity governance frameworks, policies, standards, and procedures.
• Identify, assess, and monitor cybersecurity risks and vulnerabilities.
• Lead major cybersecurity incident management and crisis response efforts.
• Oversee SOC services, advanced threat detection systems, SOAR platforms, and security analytics capabilities.
• Collaborate with Risk Management and Business Continuity teams for cyber resilience plans.

Skills

Cybersecurity leadership

Governance

Risk management

Education

Bachelor's degree in Cybersecurity/CS/Software Eng

Job description

Lead and manage the organization's Information and Cybersecurity function across Information Technology (IT), Information and Communication Technology (ICT), Operational Technology (OT), and SCADA environments. Ensure the confidentiality, integrity, and availability of information assets by establishing effective governance, risk management, compliance, security operations, and cyber resilience capabilities. The role is responsible for developing and implementing cybersecurity strategies, frameworks, policies, controls, and monitoring mechanisms to protect the organization from evolving cyber threats while ensuring compliance with regulatory and industry requirements.

Key Responsibilities

Cybersecurity Strategy and Governance

• Develop and implement the organization's cybersecurity strategy aligned with corporate objectives.
• Establish and manage cybersecurity governance frameworks, policies, standards, and procedures.
• Present cybersecurity risks, trends, and strategic initiatives to executive management.

Cybersecurity Risk Management

• Identify, assess, and monitor cybersecurity risks and vulnerabilities.
• Develop and oversee risk treatment plans and mitigation strategies.
• Maintain the cybersecurity risk register and reporting framework.
• Lead risk assessments and mitigation activities across IT, ICT, OT, Industrial Control Systems (ICS), and SCADA environments, ensuring the protection of critical infrastructure, control systems, IoT devices, and field assets.

Compliance and Regulatory Requirements

• Ensure compliance with applicable cybersecurity regulations, standards, and frameworks, including ISO 27001, SCADA cybersecurity standards, Oman Investment Authority (OIA) requirements, and other relevant regulations.
• Coordinate internal and external cybersecurity audits.
• Monitor regulatory developments and implement new requirements.
• Represent the organization before regulators, government entities, auditors, and industry forums to ensure alignment with emerging obligations and requirements.
• Ensure adherence to industry best practices and regulatory standards.

Security Architecture and Technical Controls

• Review and approve security architectures and technical controls across IT, OT, ICs, and SCADA environments to ensure resilience, reliability, and compliance.
• Oversee the implementation of security controls and technical safeguards.
• Evaluate and approve appropriate cybersecurity technologies and solutions.
• Ensure cybersecurity requirements are integrated throughout project lifecycles, including governance and risk management in digital transformation and infrastructure initiatives.

Security Operations and Incident Response

• Ensure effective detection, investigation, response, and recovery from cyber incidents.
• Lead major cybersecurity incident management and crisis response efforts.
• Oversee Security Operations Center (SOC) services, advanced threat detection systems, SOAR platforms, and security analytics capabilities.
• Monitor KPIs such as Incident Response Effectiveness, Mean Time to Detect (MTTD), and Mean Time to Respond (MTTR).

Threat and Vulnerability Management

• Ensure timely and effective remediation of identified security vulnerabilities.
• Enhance detection and response capabilities through automation and advanced analytics.

Third-Party and Supply Chain Security

• Establish and manage a third-party cybersecurity risk management framework.
• Assess cybersecurity risks associated with vendors and partners.
• Incorporate cybersecurity requirements into contracts and agreements.
• Monitor supplier compliance with security requirements.

Business Continuity and Cyber Resilience

• Collaborate with Risk Management and Business Continuity teams to integrate cyber resilience requirements into Business Continuity and Disaster Recovery plans.
• Support crisis management during cyber incidents and emergencies.

Security Awareness and Culture

• Develop and implement organization-wide cybersecurity awareness and training programs.
• Promote a strong cybersecurity culture across all organizational levels.
• Measure and report on the effectiveness of awareness initiatives.

Security Assurance and Continuous Improvement

• Comply with Quality, Health, Safety, and Environmental (QHSE) requirements.
• Maintain the confidentiality and integrity of organizational information.
• Lead continuous improvement initiatives to enhance cybersecurity maturity and organizational resilience.

People Leadership and Resource Management

• Define SMART performance objectives, responsibilities, and authorities for team members.
• Manage and evaluate performance fairly and transparently while creating individual development plans.
• Mentor and support team members to improve capabilities and performance.
• Foster a positive and productive work environment.
• Stay current with technological developments and guide the team in adopting relevant advancements.
• Delegate responsibilities with clearly defined timelines and quality expectations.

Policies and Procedures

• Comply with all organizational policies and guidelines.
• Identify opportunities for process improvement, development, and automation.
• Enhance and document existing procedures while clearly assigning responsibilities within the team.
• Ensure accurate, comprehensive, and timely reporting in accordance with organizational standards.

Desired Candidate Profile

• Bachelor's degree in Cybersecurity, Computer Science, Software Engineering, or an equivalent discipline.
• 9 years of experience in cybersecurity, security regulations, network and cybersecurity, information security, computer systems engineering, information systems, networking, or a related IT discipline.
• Experience working in ICT and OT environments.
• At least 2 years of leadership or managerial experience.