VP Cyber Security Operations

Oman Investment Authority; Muscat; On-site; OMR 90,000 - 150,000; Full time

Job summary

Oman Investment Authority is seeking a Vice President of Cyber Security Operations to lead the Cyber Security Operations Center, threat intelligence, incident response, forensics, and vulnerability management. The role drives security engineering, cloud and platform security, application security, and automation to deliver resilient, scalable services.

The candidate will develop a three-year roadmap, manage governance, and ensure regulatory compliance across IT risk, data protection, and

Qualifications

• Bachelor's degree in CS/ISM/IT or related field required.
• CISSP/CISA mandatory; CISM/CRISC desirable.
• 12+ years in risk and cyber security with 4+ years in leadership.

Responsibilities

• Lead Cyber Security Operations, SOC, and managed services.
• Define and implement operating model, governance, and roadmaps.
• Oversee risk management, controls, and regulatory compliance.
• Drive incident response, forensics, and vulnerability management.
• Partner with legal and regulators to meet standards and data privacy.

Skills

Security leadership

Cloud security

Incident management

Forensics

Threat intelligence

Security architecture

Identity and access

Data protection

Penetration testing

Security operations

Education

Bachelor's degree in CS/ISM/IT

Master's degree preferred

Tools

Burp Suite

Job description

ROLE OBJECTIVE

The Vice President Cyber Security Operations is accountable for leading Otech s cyber security operations and managed security services including the Security Operations Center SOC threat intelligence incident response and digital forensics vulnerability management security engineering cloud and platform security application security operations security automation and operational service assurance The role ensures resilient efficient scalable and commercially competitive services through disciplined operating models capable teams strategic partnerships automation and measurable performance The role develops and executes the Cyber Security Operations strategy in alignment with the cyber security strategy risk appetite policies standards and governance requirements The position is responsible for implementing controls producing operational compliance evidence remediating control gaps and escalating material cyber risks

RESPONSIBILITIES

Day-to-day Leadership amp Operating Model Day-to-day leadership and management of the Cyber Security functional area and its respective teams Develop and implement an operating model with its underpinning processes and practices Define the target organization roles spans and layers capacity plan and sourcing strategy internal partner contract with Omanization milestones Establish governance cadences weekly operations monthly Steering Committee quarterly business reviews with clear decision rights and escalation paths Strategy Service Catalogue amp Roadmap Set the cybersecurity operation strategy aligned to business needs risk appetite and regulatory expectations translate into a three-year roadmap with annual plans Maintain a service catalogue covering advisory and governance Security Operations Center and managed services application and product security cloud and platform security incident response and forensics and security testing and update the catalogue periodically Build reusable accelerators and knowledge assets runbooks reference architectures automation playbooks ensuring they are delivered in editable source formats Risk Management Architecture amp Controls Create actionable insights and understanding through the analysis of both quantitative and qualitative data building recommendations that directly address the Cybersecurity business objectives Create and maintain a comprehensive protection plan for systems networks and data assess and manage information technology risks across the organization identify threats vulnerabilities business impact and mitigation strategies Develop and maintain security standards guidance and playbooks Own security architecture baselines identity-first security identity and access privileged access network segmentation data protection and loss prevention endpoint detection and response cloud-native application protection and configuration posture secure development lifecycle code analysis dependency hygiene and security automation Threat Intelligence Testing amp Assurance Develop a qualitative and quantitative analysis program for Cyber threat amp Brand intelligence identify adversary motives targets and intentions maintain and evaluate intelligence sources to improve effectiveness Conduct a regular security testing regime including technical audit vulnerability management and vulnerability assessment and penetration testing track remediation to closure Lead incident management post-incident reviews and crisis simulations implement lessons learned to reduce recurrence Compliance Policy amp Governance Establish governance frameworks and policies collaborate with legal and regulatory teams to meet regulatory and statutory standards Maintain ISO IEC 27001 and align to the designated Cybersecurity Framework oversee software supply-chain security data protection and privacy requirements including data residency and third-party risk management Define and report key performance indicators for example mean time to detect respond age of critical vulnerabilities service level attainment customer satisfaction through executive dashboards Strategic partner management Act as overall program manager for Otech for strategic partners with partners across various phases owning scope deliverables quality gates and acceptance criteria Ensure knowledge and intellectual property transfer runbooks automation infrastructure-as-code dashboards and Omanization progression Enforce exclusivity and go-to-market rules that maintain Otech s control of client relationships while leveraging partner technical capacity

Qualification

Bachelor s degree in computer science (CS), Information System Management (ISM), Information Technology (IT) Master s degree preferred

Certification

Certified Information Systems Security Professional (CISSP) or Certified Information Systems Auditor (CISA) mandatory Certified Information Security Manager (CISM)/ Certified in Risk and Information Systems Control (CRISC), incident response and forensics credentials are desirable

Experience

At least 12+ years of experience in the field of Risk & Cyber Security with 4+ years in leading a team. Should have independently conducted at least 3 or 4 Risk Assessments audits for large enterprises

Skills

Strong security and technical background with a track record of leading and managing technical and operational security functions and teams. Skills Sound knowledge of Open-Source Security tools i.e. Burp Suite Proven track record in cloud security, secure development practices, and running a Security Operations Center and managed detection services. Knowledge across identity and access, network design, security analytics, incident management, penetration testing, security architecture and design, security operations, and cloud architecture and security (major public clouds). Security architecture and design, Security Operations Tooling literacy across monitoring, automation, and code security; ability to evaluate and implement technologies without vendor lock-in. Software development, Cloud architecture, security management in cloud environments such as AWS/OCI/Azure etc o Experience with Audit & Compliance activities o Experience in forensic analysis o Experience with ISO27001 Implementation o Experience with VAPT tools and methodologies o Experience working in an Agile environment Demonstrated proficiency in the Microsoft Office suite