VP Cyber Security Operations

ROLE OBJECTIVE The Vice President, Cyber Security Operations is accountable for leading Otech's cyber security operations and managed security services, including the Security Operations Center (SOC), threat intelligence, incident response and digital forensics, vulnerability management, security engineering, cloud and platform security, application security operations, security automation, and operational service assurance. The role ensures resilient, efficient, scalable, and commercially competitive services through disciplined operating models, capable teams, strategic partnerships, automation, and measurable performance. The role develops and executes the Cyber Security Operations strategy in alignment with the cyber security strategy, risk appetite, policies, standards, and governance requirements. The position is responsible for implementing controls, producing operational compliance evidence, remediating control gaps, and escalating material cyber risks. RESPONSIBILITIES Day-to-day Leadership & Operating Model Day-to-day leadership and management of the Cyber Security functional area and its respective teams. Develop and implement an operating model, with its underpinning processes and practices. Define the target organization (roles, spans and layers), capacity plan, and sourcing strategy (internal, partner, contract) with Omanization milestones. Establish governance cadences (weekly operations, monthly Steering Committee, quarterly business reviews) with clear decision rights and escalation paths. Strategy, Service Catalogue & Roadmap Set the cybersecurity operation strategy aligned to business needs, risk appetite, and regulatory expectations; translate into a three-year roadmap with annual plans. Maintain a service catalogue covering advisory and governance, Security Operations Center and managed services, application and product security, cloud and platform security, incident response and forensics, and security testing, and update the catalogue periodically. Build reusable accelerators and knowledge assets (runbooks, reference architectures, automation playbooks), ensuring they are delivered in editable/source formats. Risk Management, Architecture & Controls Create actionable insights and understanding, through the analysis of both quantitative and qualitative data, building recommendations that directly address the Cybersecurity business objectives Create and maintain a comprehensive protection plan for systems, networks, and data; assess and manage information technology risks across the organization (identify threats, vulnerabilities, business impact, and mitigation strategies). Develop and maintain security standards, guidance and playbooks. Own security architecture baselines: identity-first security (identity and access, privileged access), network segmentation, data protection and loss prevention, endpoint detection and response, cloud-native application protection and configuration posture, secure development lifecycle (code analysis, dependency hygiene), and security automation. Threat Intelligence, Testing & Assurance Develop a qualitative and quantitative analysis program for Cyber threat & Brand intelligence. identify adversary motives, targets, and intentions; maintain and evaluate intelligence sources to improve effectiveness Conduct a regular security testing regime including technical audit, vulnerability management, and vulnerability assessment and penetration testing; track remediation to closure. Lead incident management, post-incident reviews, and crisis simulations; implement lessons learned to reduce recurrence. Compliance, Policy & Governance Establish governance frameworks and policies; collaborate with legal and regulatory teams to meet regulatory and statutory standards Maintain ISO/IEC 27001 and align to the designated Cybersecurity Framework; oversee software supply-chain security, data protection and privacy requirements (including data residency), and third-party risk management. Define and report key performance indicators (for example, mean time to detect/respond, age of critical vulnerabilities, service level attainment, customer satisfaction) through executive dashboards. Strategic partner management Act as overall program manager for Otech for strategic partners with partners across various phases owning scope, deliverables, quality gates, and acceptance criteria. Ensure knowledge and intellectual property transfer (runbooks, automation, infrastructure-as-code, dashboards) and Omanization progression Enforce exclusivity and go-to-market rules that maintain Otech s control of client relationships while leveraging partner technical capacity.

Desired Candidate Profile

Qualification Bachelor s degree in computer science (CS), Information System Management (ISM), Information Technology (IT) Master s degree preferred Certification Certified Information Systems Security Professional (CISSP) or Certified Information Systems Auditor (CISA) mandatory Certified Information Security Manager (CISM)/ Certified in Risk and Information Systems Control (CRISC), incident response and forensics credentials are desirable. Experience At least 12+ years of experience in the field of Risk & Cyber Security with 4+ years in leading a team. Should have independently conducted at least 3 or 4 Risk Assessments audits for large enterprises. Strong security and technical background with a track record of leading and managing technical and operational security functions and teams. Skills Sound knowledge of Open-Source Security tools i.e. Burp Suite Proven track record in cloud security, secure development practices, and running a Security Operations Center and managed detection services. Knowledge across identity and access, network design, security analytics, incident management, penetration testing, security architecture and design, security operations, and cloud architecture and security (major public clouds). Security architecture and design, Security Operations Tooling literacy across monitoring, automation, and code security; ability to evaluate and implement technologies without vendor lock-in. Software development, Cloud architecture, security management in cloud environments such as AWS/OCI/Azure etc o Experience with Audit & Compliance activities o Experience in forensic analysis o Experience with ISO27001 Implementation o Experience with VAPT tools and methodologies o Experience working in an Agile environment Demonstrated proficiency in the Microsoft Office suite