Cybersecurity Manager

Snoonu; Doha; Hybrid; QAR 240,000 - 420,000; Full time

Job summary

Snoonu is seeking a Cybersecurity Manager to translate strategy into operational security capabilities across security operations, vulnerability management, incident response, and governance.

You will manage security engineers, analysts, and specialists, coordinate with technology, product, and business units, and ensure timely remediation of risks while maintaining reliable security processes.

Qualifications

• Bachelor’s or Master’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or related discipline, or equivalent experience.

Responsibilities

• Translate strategy into operational plans and schedules across security operations, vulnerability management, application and cloud security, and identity security.
• Act as the primary escalation point for operational security matters and coordinate with stakeholders to ensure timely delivery and risk remediation.
• Manage day-to-day security monitoring, incident response, tabletop exercises, and documentation of incidents and lessons learned.
• Oversee vulnerability management across applications, infrastructure, cloud, and endpoints with timely remediation.
• Provide guidance to engineering and product teams on secure development practices and CI/CD security gates.
• Coordinate governance, audits, and third-party security assessments; maintain compliance records.
• Lead and develop a security team of analysts, engineers, and specialists, fostering ownership and collaboration.
• Report security metrics, trends, and progress to the Head of Cybersecurity and stakeholders.

Skills

Cybersecurity leadership

Security operations

Vulnerability management

Incident response

Cloud security

Application security

CI/CD security

Governance & compliance

Team management

Communication

Education

Bachelor's/Master's in Cybersecurity/CS/IT/Engineering

Tools

Security tools

Job description

???? Welcome to Your Next Adventure! The Cybersecurity Manager is responsible for the day-to-day management and execution of Snoonu’s cybersecurity operations, translating the strategy, policies, and priorities set by the Head of Cybersecurity into consistent, well‑run security capabilities across security operations, vulnerability management, incident response, application and cloud security oversight, identity security, and governance execution. The role operates as the operational backbone of the cybersecurity function, managing security engineers, analysts, and specialists on a day‑to‑day basis, ensuring controls are implemented correctly, risks are tracked and remediated on schedule, and security processes run reliably and efficiently. Working closely with the Head of Cybersecurity, and in regular contact with Technology, Product, IT, Data, and business stakeholders, the Cybersecurity Manager ensures that security initiatives are delivered on time, that operational risk is visible and managed, and that the team executes against the priorities defined by cybersecurity leadership. The role combines hands‑on technical oversight with team leadership, acting as the primary point of escalation for operational security matters and freeing the Head of Cybersecurity to focus on strategy, governance, and executive‑level risk management.

What You’ll Get Your Hands On

Operational Leadership & Program Execution

• Translate the cybersecurity strategy and roadmap set by the Head of Cybersecurity into operational plans, priorities, and day‑to‑day execution schedules.
• Coordinate execution across security operations, vulnerability management, application security, cloud security, and identity security workstreams.
• Track progress of security initiatives, projects, and remediation activities, and escalated delays, resourcing gaps, or emerging risks to the Head of Cybersecurity.
• Ensure security processes, runbooks, and procedures are documented, current, and consistently followed by the team.
• Support planning and reporting on cybersecurity capacity, workload, and resourcing needs.

Security Operations & Incident Response

• Manage day-to-day security monitoring and detection activities, ensuring alerts are triaged, investigated, and resolved within agreed timelines.
• Act as the operational incident commander for security incidents, coordinating containment, investigation, and remediation, and escalating significant or high‑severity incidents to the Head of Cybersecurity promptly.
• Ensure incident documentation, timelines, and lessons‑learned reports are completed for all incidents.
• Coordinate and participate in incident‑response tabletop exercises and technical simulations.

Vulnerability & Exposure Management

• Manage the day-to-day vulnerability management program across applications, infrastructure, cloud, and endpoints.
• Ensure vulnerabilities are triaged, prioritized, assigned, and tracked to remediation against agreed SLAs.
• Coordinate with engineering, infrastructure, and platform teams to drive timely remediation of critical and high‑risk findings.
• Monitor overdue items, recurring weaknesses, and exceptions, and escalated material or stalled risks to the Head of Cybersecurity.
• Support coordination of penetration tests, scans, and security assessments, and track resulting findings to closure.

Application, Cloud & Dev Sec Ops Security Oversight

• Oversee day-to-day implementation of application security and Dev Sec Ops practices, including code scanning, dependency checks, and secure release gates.
• Monitor cloud security posture and coordinate remediation of misconfigurations, excessive permissions, and exposed assets with infrastructure and platform teams.
• Support engineering and product teams with practical security guidance during design and development, escalating architecture‑level or higher‑risk decisions to the Head of Cybersecurity.
• Track adoption and effectiveness of security tooling embedded in CI/CD pipelines and development workflows.

Identity, Access & Data Security

• Oversee operational execution of access reviews, joiner/mover/leaver processes, and privileged‑access controls.
• Monitor for dormant accounts, excessive privileges, and access‑control weaknesses, and drive remediation with system and application owners.
• Support implementation of data‑security controls, including access control, encryption, and data‑loss‑prevention monitoring.
• Support investigation of suspected data‑exposure or unauthorized‑access incidents.

Governance, Compliance & Third‑Party Security Execution

• Support execution of the security governance framework, ensuring policies, standards, and procedures defined by the Head of Cybersecurity are implemented and followed operationally.
• Coordinate evidence collection, audits, and assessments related to ISO/IEC 27001, PCI DSS, and other applicable frameworks.
• Track findings from audits and assessments through to remediation, and maintain accurate compliance records.
• Coordinate day-to-day third‑party security assessments and monitor remediation of vendor‑related risks.

Security Awareness & Reporting

• Coordinate delivery of security awareness training, phishing simulations, and role‑specific enablement programs.
• Track behavioral metrics and awareness‑program effectiveness, and report trends to the Head of Cybersecurity.
• Prepare regular operational reporting on security metrics, KPIs, incidents, vulnerabilities, and remediation status for the Head of Cybersecurity and relevant stakeholders.

Team Leadership & Development

• Directly manage and coach a team of security analysts, engineers, and specialists across security operations, vulnerability management, and related functions.
• Set clear day‑to‑day expectations, priorities, and performance objectives for the team, aligned with direction from the Head of Cybersecurity.
• Conduct performance reviews, identify development needs, and support career growth for team members.
• Support hiring, onboarding, and knowledge continuity within the team.
• Foster a culture of ownership, technical excellence, and collaboration within the operational security team.

The Magic You Bring

• Bachelor’s / Master’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or a related discipline, or equivalent relevant professional experience.
• 4-7 years of experience in the cybersecurity field, including prior experience leading or coordinating a team or workstream.
• Hands‑on experience across several security domains such as security operations, vulnerability management, incident response, application security, cloud security, or identity and access management.
• Practical experience managing security tools, processes, and day‑to‑day operations in a technology‑driven organization.
• Working knowledge of cloud environments, modern software‑development practices, CI/CD, and enterprise application architectures.
• Experience supporting security governance, audits, or compliance activities.
• Strong organizational, coordination, and problem‑solving skills, with the ability to manage multiple priorities under time pressure.
• Good communication skills, with the ability to work effectively with technical teams and non‑technical stakeholders.

Technical & Functional Competencies

• Security operations and incident response management.
• Vulnerability and exposure management.
• Application, cloud, and Dev Sec Ops security oversight.
• Identity and privileged‑access security.
• Data security and data‑loss prevention.
• Security governance, audit, and compliance support (ISO 27001, PCI DSS).
• Third‑party security assessment coordination.
• Security awareness program management.
• Security metrics, reporting, and KPI tracking.
• Team leadership and operational management.