VP Security Operations (Cybersecurity)

About the role

The VP Security Operations leads the cybersecurity function to protect SBST's IT and OT environments from cyber threats, manage incidents and security tools, ensure regulatory compliance and improve cyber resilience. The role covers policy, incident response, vendor management and security projects.

Key responsibilities

• Take part in sector-wide cybersecurity programmes and external and internal forums and meetings.
• Manage cybersecurity operations, services (e.g. VAPT) and tools, including EDR/XDR tools and incident response with SOC teams.
• Detect threats and anomalies, analyse security logs and recommend controls and solutions.
• Formulate cybersecurity policies, procedures and documentation for IT and OT systems, aligned with CCoP 2.0, CP8, ISO27001 and similar standards.
• Work with stakeholders to draft and improve incident response plans and playbooks, and handle cyber incidents and crises.
• Analyse cloud platforms such as AWS, Azure and M365, and support regulatory and sector audits.
• Plan, run and exercise tabletop exercises, penetration tests and red/purple/blue teaming exercises.
• Oversee cybersecurity measures protecting IT and OT Critical Information Infrastructure (CII) assets, manage cybersecurity vendors and plan and deliver budgeted cybersecurity projects.

Required profile

• Minimum degree in Computer Engineering or equivalent; trained in cybersecurity, information security, forensics or equivalent.
• Minimum 15-25 years of full-time cybersecurity experience in policy, incident response, management and regulatory compliance.
• Certification such as CISSP, CISM, CISA, CEH or CRISC, or equivalent.
• Leadership qualities, ability to work under pressure, and excellent communication and analytical skills.
• Experience in public transport and/or OT is highly valued.

Required skills

• Email security, vulnerability management, penetration testing, network security (firewall, IPS/IDS, SIEM, threat intelligence).
• Knowledge of ISO27001, IEC62443, NIST Cybersecurity Framework and CCoP.
• Threat detection, penetration testing and red/purple teaming; forensics and incident management.
• Network, web and application security knowledge is highly valued.