Cybersecurity Planning Section Head

Role Purpose

To establish and provide technical guidance and supervision for Cybersecurity Planning Section's activities, in order to deliver the department's mandate by managing all tasks and activities to ensure that SANS Cybersecurity and Data Protection Strategy Programs are run to completion, within the set KPIs, agreed budgets and adopted policies and procedures as well as applicable regulatory requirements. Moreover, the role is responsible for overseeing and monitoring the development of the annual budgeting and business planning, as well as carrying the periodic financial forecasting within the set KPIs, agreed budgets and adopted policies and procedures.

Knowledge and Experience

• Minimum of 6 years of relevant experience in Cybersecurity or Information Technology.
• Experience in an Industry with OT is preferable.

Education and Certifications

• Bachelor's Degree in Computer Science, Engineering, Information Systems (or other relevant technical disciplines).
• Professional security management certification is desirable, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials.
• PMP certificate is preferred.

Key Accountability Areas

Key Activities

Cybersecurity Planning

• Review and validate Cybersecurity and Data Protection projects feasibility studies and business cases.
• Ensure that all Cybersecurity and Data Protection project charters, scope of work, and deliverables are accurately defined, aligned with business goals, and approved by relevant stakeholders.
• Oversee all financial activities related to the Cybersecurity and Data Protection projects, including but not limited to: Purchase Requests (PR), handling change requests, ensuring the receiving of services and subsequently processing the payment.
• Monitor Cybersecurity and Data Protection projects/initiatives budget and provide a briefing of the status to the Cybersecurity management.
• Support the team for any project risks and oversee the development of risk mitigation activities in collaboration with the relevant internal stakeholders.
• Supervise the development and maintenance of Cybersecurity and Data Protection project schedules, ensuring that critical path activities are identified and closely monitored.
• Oversee Cybersecurity and Data Protection annual budget and business planning, as well as carry the periodic financial forecasting in collaboration with department heads and finance teams.
• Oversee the development of all Cybersecurity and Data Protection project management activities throughout the project's lifecycle, including but not limited to: producing the business case, reviewing the necessary documentation (e.g., project plan, project charter, contract agreement, implementation plan, and project closure report).
• Maintain cybersecurity and data protection budget dashboard to track the directorate spending as per the business plan.
• Monitor financial models and forecasts for individual projects to support resource allocation decisions and financial planning.
• Utilize project management tools and methodologies to create effective project plans.
• Collaborate closely with project managers to ensure that project plans are realistic and achievable.
• Provide timely and concise communications to business and technical leadership regarding project status and pending issues; analyze processes and make recommendations for optimizing resources and project delivery.
• Provide recommendations for resource adjustments based on project requirements and constraints.
• Supervise the implementation of approved changes and update project scope, schedule, and financials accordingly.
• Stay up to date with industry trends and advancements in project management and cybersecurity and data protection solutions.
• Implement best practices and lessons learned from previous projects.
• Evaluate and enhance commercial project planning processes and methodologies.
• Maintain cybersecurity and data protection projects dashboard to visualize the progress and identify potential risks.

Policies, Processes and Procedures

• Conduct day-to-day activities while ensuring compliance with policies and procedures.
• Contribute to the identification of opportunities for continuous improvement of systems and processes, taking into account leading practices, changes in the business environment, cost reduction, and productivity improvement.

People Management

• Actively participate in on-the-job training, mentoring, and coaching of subordinates.
• Provide clear direction, prioritize tasks, assign and delegate responsibility, and monitor the workflow.
• Promote a high-performance working environment embracing SANS's values.