Director, Cyber Strategy & Resilience

بنك مسقط; Muscat; On-site; OMR 90,000 - 150,000; Full time

Job summary

Bank Muscat in Oman invites an experienced executive to head the Cyber Strategy and Resilience function. You will own the cyber strategy, multi-year roadmap, and governance across third-party risk, resilience, and remediation, translating enterprise risk appetite into funded initiatives.

The role requires 10-15 years in cyber leadership, with a track record in regulated financial services, and hands-on experience with NIST CSF, ISO 27001, and crisis management.

Qualifications

• Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Information Technology, Engineering or a related discipline.
• 10-15 years, including at least 5 years in cyber leadership, strategy, resilience or portfolio governance.
• Demonstrated experience in a regulated, high-availability or financial-services environment is strongly preferred.

Responsibilities

• Own the cyber strategy, target-state operating model and multi-year roadmap, and lead the annual strategy refresh cycle.
• Govern portfolio prioritization, business cases, benefits, dependencies, OpEx and CapEx, and provide executive-level performance reporting.
• Maintain the cyber resilience strategy and crisis-management framework and oversee exercises, cyber recovery readiness and lessons learned.
• Oversee the first-line third-party cyber risk programme and ensure supplier risks are assessed and treated through the procurement lifecycle.
• Establish central remediation governance, risk-based prioritization and escalation for overdue or SLA-breaching security issues.
• Set objectives, service measures and accountability across strategy, resilience, remediation and third-party risk teams.

Job description

Bank Muscat in Oman invites an experienced executive to head the Cyber Strategy and Resilience function. You will own the cyber strategy, multi-year roadmap, and governance across third-party risk, resilience, and remediation, translating enterprise risk appetite into funded initiatives.

The role requires 10-15 years in cyber leadership, with a track record in regulated financial services, and hands-on experience with NIST CSF, ISO 27001, and crisis management.