Security Operations Manager

About the role

We are looking for an experienced Security Operations Manager to lead and enhance the security operations capability for a global brand in the Middle East. Reporting to the Technical Infrastructure Manager, you will oversee a dedicated Security Operations team and drive incident response, vulnerability management and process improvement.

Key responsibilities

• Lead, mentor and manage the Security Operations team.
• Monitor, assess and respond to security events, incidents and vulnerabilities.
• Provide oversight during incidents, conduct root‑cause analysis and coordinate remediation.
• Identify security exposures and develop mitigation plans.
• Support and improve security platforms such as endpoint protection, SIEM, firewalls, WAF, IPS/IDS, DLP, IAM, email security and web proxies.
• Strengthen security operations processes, reporting, dashboards and management metrics.
• Provide security design input to technology teams and production deployments.
• Ensure compliance with PCI‑DSS, ISO 27001 and other relevant security standards.
• Collaborate with IT, business leaders, vendors and senior stakeholders to achieve cyber‑security objectives.

Required profile

• Solid experience in information security, cyber security or related infrastructure roles.
• Proven leadership or management experience in a technical security operations environment.
• Strong background in incident response, vulnerability management and intrusion analysis.
• Good knowledge of Linux, Windows, workstation and mobile device hardening.
• Understanding of ISO 27001 and information security best practices.
• Excellent communication skills for engaging technical and non‑technical stakeholders.
• Experience in banking, financial services or insurance is preferred.
• Relevant degree and certifications such as CISSP, CISA, CISM or ITIL are highly regarded.

Required skills

• Endpoint protection platforms
• Security Information and Event Management (SIEM)
• Firewalls, Web Application Firewalls (WAF)
• Intrusion Prevention/Detection Systems (IPS/IDS)
• Data Loss Prevention (DLP)
• Identity and Access Management (IAM)
• Email security solutions
• Web proxy technologies
• Vulnerability scanning tools
• Penetration testing methodologies