Cybersecurity Operations Manager

About the role

A hands-on Cybersecurity Operations Manager is sought to lead and strengthen the organisation's cybersecurity operations. The role safeguards the confidentiality, integrity and availability of enterprise systems and data through security monitoring, incident response and vulnerability management, while overseeing security tools and platforms, supporting compliance and collaborating with IT infrastructure, cloud, application and business teams.

Key responsibilities

• Manage day-to-day cybersecurity operations, including security monitoring, threat detection and alert/event/incident tracking
• Maintain cybersecurity procedures, standards and documentation, and coordinate incident response with internal teams and external vendors
• Conduct root cause analysis, run threat intelligence and proactive threat hunting, and oversee vulnerability assessments and remediation
• Ensure timely patching and security hardening, track risks and remediation progress, and report to management
• Manage and optimise security tools such as SIEM, EDR/XDR, email security, firewalls, IDS/IPS, vulnerability scanners and IAM
• Support compliance with ISO 27001, NIST, CIS, PDPA and related standards, assist with audits and maintain operational metrics and KRIs
• Collaborate with infrastructure, cloud, application and business teams to improve the security posture

Required profile

• Bachelor's degree in Cybersecurity, IT, Computer Science or a related field
• 5-8 years of experience in cybersecurity or IT security operations
• Experience in SOC operations and incident response; cloud security exposure (Azure, AWS or GCP) preferred
• Strong analytical, problem-solving, communication and stakeholder management skills, with proven crisis and incident management ability
• Relevant certifications such as CISSP, CISM, CEH, Microsoft or ISO 27001 are preferred

Required skills

• Security operations, incident response, vulnerability, endpoint, network, IAM and cloud security
• Hands-on experience with Microsoft Defender, SIEM, EDR/XDR and vulnerability management tools
• Familiarity with KQL, threat hunting and security analytics is a plus