Role Summary
We are seeking a seasoned Cybersecurity Senior Specialist to lead and oversee our organization's cybersecurity operations, ensure regulatory compliance, and drive a culture of security excellence. This role is central to safeguarding our customer and company data, responding to evolving threats, and supporting our secure digital transformation roadmap.
The ideal candidate brings deep hands-on expertise across security operations, frameworks, and tooling combined with strong leadership and communication skills to engage both technical teams and executive stakeholders.
Key Responsibilities
- Lead and manage the Security Operations Center (SOC), including 24/7 threat monitoring, detection, and response workflows.
- Develop, implement, and maintain cybersecurity policies, procedures, standards, and controls aligned with industry best practices.
- Oversee SIEM, EDR, firewall, and cloud security platforms — ensuring optimal configuration, tuning, and coverage.
- Manage the full incident response lifecycle: detection, containment, eradication, recovery, and post-incident review.
- Ensure organizational compliance with cybersecurity frameworks including NCA ECC, ISO 27001, and PCI-DSS.
- Conduct and coordinate regular risk assessments, vulnerability management programs, and security audits.
- Monitor threat intelligence feeds and translates emerging threats into actionable defensive measures.
- Deliver cybersecurity awareness training and foster a security-conscious organizational culture.
- Prepare and present security metrics, dashboards, and status reports to senior leadership.
Qualifications & Requirements
Education
- Bachelor's degree in Cybersecurity, Information Security, Computer Science, or a closely related field.
Experience
- Minimum 5 years of progressive experience in cybersecurity operations and security management roles.
- Proven track record managing security programs in complex enterprise environments.
- Experience in the travel, hospitality, or service industry is a significant advantage.
Technical Skills
- Strong working knowledge of SIEM platforms (e.g., Splunk, Microsoft Sentinel, etc).
- Hands-on experience with EDR solutions (e.g., CrowdStrike, Sentinel One, Microsoft Defender).
- Deep understanding of firewall architecture, network security, and perimeter defense.
- Experience securing cloud environments (AWS, OCI, GCP) and hybrid infrastructure.
- Proficiency in incident response, digital forensics, and threat hunting techniques.
Frameworks & Compliance
- Working knowledge of ISO/IEC 27001 information security management systems.
- Experience implementing and maintaining PCI-DSS compliance programs.
Certifications (Preferred)
CISSP
CISM
CEH
CompTIA Security+