Head of Cyber Strategy and Resilience

Bank Muscat; Muscat; On-site; OMR 90,000 - 120,000; Full time

Job summary

Bank Muscat seeks a strategic cybersecurity leader to shape and execute the bank's cyber strategy, governance and multi-year investment roadmap. You will translate enterprise priorities into funded programs, balancing resilience, third-party risk and crisis-ready capabilities.

You will own the target-state operating model, oversee governance, reporting, and risk-based remediation across strategy, resilience, and third-party risk, collaborating with IT and business stakeholders to sustain cyber

Responsibilities

• Own the cyber strategy target-state operating model and multi-year roadmap and lead the annual strategy refresh cycle
• Govern portfolio prioritization, business cases, benefits, dependencies, OpEx and CapEx and provide executive-level performance reporting
• Maintain the cyber resilience strategy and crisis-management framework and oversee exercises, cyber recovery readiness, and lessons learned
• Oversee the first-line third-party cyber risk programme and ensure supplier risks are assessed and treated through the procurement lifecycle
• Establish central remediation governance, risk-based prioritization, and escalation for overdue or SLA-breaching security issues
• Set objectives, service measures, and accountability across strategy, resilience, remediation, and third-party risk teams

Job description

Main Role

Main Role Lead the organization s cyber strategy security investment portfolio third-party cyber risk remediation governance and cyber resilience capabilities The role converts enterprise priorities and risk appetite into a funded multi-year roadmap and ensures that critical services can prepare for withstand respond to and recover from significant cyber disruption

Principal Duties and Responsibilities

Core Accountabilities Own the cyber strategy target-state operating model and multi-year roadmap and lead the annual strategy refresh cycle Govern portfolio prioritization business cases benefits dependencies OpEx and CapEx and provide executive-level performance reporting Maintain the cyber resilience strategy and crisis-management framework and oversee exercises cyber recovery readiness and lessons learned Oversee the first-line third-party cyber risk programme and ensure supplier risks are assessed and treated through the procurement lifecycle Establish central remediation governance risk-based prioritization and escalation for overdue or SLA-breaching security issues Set objectives service measures and accountability across strategy resilience remediation and third-party risk teams

Governance Stakeholder and Reporting Responsibilities

Governance Stakeholder and Reporting Responsibilities Maintain clear operating procedures evidence service metrics and management reporting for the assigned security services Coordinate with IT operations architecture