Manager, Digital & Technology (IT Security)

This role is responsible for leading the organisation's cybersecurity architecture, security engineering, infrastructure security, endpoint security, application security and data protection functions. The incumbent will drive the cybersecurity technology roadmap, oversee the cybersecurity platform ecosystem, and ensure security-by-design principles are embedded across infrastructure, cloud, data, AI and application initiatives.

The role will work closely with infrastructure, cloud, network, application, data, OT and business teams to strengthen the organisation's cyber resilience, reduce cyber risk and enhance security capabilities through architecture governance, technology implementation and continuous improvement of cybersecurity controls.

In addition, the role will lead team responsible for managing cybersecurity platforms, application security, data protection and enterprise security architecture.

Responsibilities

• Lead the development and execution of the organisation's cybersecurity architecture and technology roadmap, ensuring alignment with business objectives and enterprise technology strategy.
• Establish and maintain cybersecurity architecture standards, security patterns, technical guidelines and reference architectures.
• Lead security architecture reviews for infrastructure, cloud, network, endpoint, application, data and digital transformation initiatives.
• Assess emerging technologies, cybersecurity threats and new business initiatives to identify security risks and recommend appropriate controls.
• Ensure security-by-design principles are incorporated throughout solution design, development and project delivery lifecycles.
• Oversee security controls across enterprise infrastructure, cloud environments, networks and endpoints.
• Lead the deployment, configuration, administration and optimisation of cybersecurity platforms across the enterprise.
• Drive the implementation and continuous improvement of endpoint protection, hardening standards, vulnerability management and privileged access controls.
• Lead the organisation's application security programme, including secure development practices, security assessments and remediation activities.
• Oversee data protection controls including data classification, encryption, key management, DLP and privacy requirements.
• Partner with development, data and business teams to embed security controls throughout the application and data lifecycle.

Requirements

• Degree in Information Security, Computer Science, Information Technology or a related discipline.
• 5 years of cybersecurity experience with at least 2 years in a leadership or managerial role.
• Strong knowledge of:
  • Security Architecture
  • Infrastructure & Endpoint Security
  • Cloud Security (Azure, Alibaba Cloud)
  • Application Security & Secure SDLC
  • Data Security & Privacy
  • IAM/PAM
  • Security Platforms (SIEM, EDR, DLP, Email Security, Vulnerability Management)
  • AI Security and API Security
• Familiarity with frameworks such as NIST CSF 2.0, CIS Controls, ISO 27001 and relevant regulatory requirements.
• Strong stakeholder management, project delivery and vendor management experience.