Cybersecurity Ops and Infrastructure Security Manager

About the role

The Cybersecurity Ops and Cloud Security Manager establishes, manages and continuously improves the organisation's cybersecurity operations capability, with a focus on cloud environments, IoT platforms and smart facility management systems. The role keeps the organisation ready to detect, respond to and recover from cyber incidents and ensures compliance with ISO/IEC 27001 and related standards, working closely with internal teams, vendors and stakeholders.

Key responsibilities

• Manage end-to-end cybersecurity operations (monitoring, detection, incident response and recovery) and lead incident responses for cloud, IoT and smart facility systems
• Maintain a Cybersecurity Incident Response Plan (CIRP) per ISO/IEC 27035, run drills and tabletop exercises, and hold post-incident reviews
• Set up and run an ISMS under ISO/IEC 27001, lead audits, risk assessments and compliance reviews, and keep risk registers, treatment plans and security KPIs
• Enforce cloud security policies (Azure, AWS, Google Cloud) covering IAM, SIEM/SOAR, data protection, CSPM and secure cloud-on-premises/IoT integration
• Oversee IoT and OT security, including BMS, SCADA and sensor networks, and set up network segmentation, zero trust, patch management and firmware updates
• Run continuous monitoring with SIEM/SOC tools, coordinate vulnerability scanning and penetration testing, and integrate threat intelligence
• Act as the main point of contact for cybersecurity operations, report to senior management on security posture, incidents and compliance, and engage vendors and auditors

Required profile

• Degree in Information Technology, Computer Science, Cybersecurity, Engineering or a related discipline
• Minimum 8-10 years in IT cybersecurity, including at least 5 years in security operations, SOC or incident response
• Proven cloud security management and ISO 27001 implementation experience
• Hands-on experience with IoT, OT or smart infrastructure is highly desirable
• Preferred: CISSP, CISM, GIAC, CEH, CCSP, AWS/Azure security or IEC 62443 certifications

Required skills

• SOC tools and SIEM/SOAR platforms (Splunk, Sentinel, QRadar)
• Cloud security architectures and controls
• Incident response frameworks and playbooks
• ISO/IEC 27001, 27002, 27035, NIST Cybersecurity Framework and IEC 62443
• Ability to turn technical risks into clear business implications