Job Description

Serve as a senior cybersecurity specialist guiding and collaborating with a team of cybersecurity engineers, playing a critical leadership role in enhancing the university's cybersecurity posture. Drive initiatives to protect the confidentiality, integrity, and availability of information assets and critical systems, while ensuring alignment with IT governance, risk management, operational security objectives, and executive reporting requirements
Responsibilities

• Collaborate with the IT Security team to define, implement, and maintain cybersecurity practices and standards across the university.
• Lead and manage IT security projects involving infrastructure upgrades and new security system deployments, ensuring timely, secure, and effective delivery.
• Oversee daily cybersecurity operations, including security monitoring, vulnerability management, and threat response to ensure system integrity and continuity.
• Develop, document, and regularly update IT security policies, standards, procedures, and operational guidelines.
• Prepare and deliver regular management reports and cybersecurity dashboards, providing insights into threat landscape, control effectiveness, and risk posture.
• Actively participate in management and stakeholder meetings, offering expert input on cybersecurity risks, controls, and improvement initiatives.
• Provide subject matter expertise in IT governance, policy formulation, and risk assessment practices.
• Maintain up-to-date IT documentation, ensuring timely reviews, approvals, and publication.
• Manage the IT Risk Management Framework and ensure effective alignment with the university's enterprise risk strategy.
• Collaborate with senior management to continuously assess IT governance and risk posture, identify control gaps, and develop actionable remediation plans.
• Provide operational support for cybersecurity tools and systems; coordinate with vendors on implementation, maintenance, and incident resolution.
• Promote security awareness through regular training and communications on IT security and data protection policies and practices.
• Act as the primary point of contact for cybersecurity incidents, leading investigation, containment, mitigation, and post-incident reporting activities

Requirements

• Have at least 10 or more years of experience in the IT Field, with appropriate experience of which is in the Cybersecurity space.
• Strong experience in vendor, project, service, people, stakeholder management and process improvement.
• Excellent interpersonal, strong people management and communication skills both written and oral with proven ability to communicate at all levels.
• Strong technical knowledge of current and developing security technologies would be an advantage.
• Able to have holistic view, able to bridge people, process and information in order to produce appropriate results; ability to see beyond the dots.
• A self-starter to learn and broaden knowledge to continuously add values to the organization.
• Strong knowledge of network protocols, security architecture, encryption, and identity management
• Hands-on experience with security technologies such as firewalls / WAF, SIEM, antivirus, DLP, VPN, IDS/IPS, email security, PAM
• Expertise in threat modeling, risk assessment, and incident response.
• Knowledge of cloud environments & cloud security - AWS, Azure, GCP would be an advantage
• Knowledge of IT Infra - on prem, cloud as well as general IT systems architecture
• Knowledge of DevOps / DevSecOps

We regret that only shortlisted candidates will be notified.

Skills Required