Manager, Security Operations

Job Mandate 

Zafin is seeking an experienced Cybersecurity Lead to handle cybersecurity operations and to ensure that Zafin maintains the highest standards of cybersecurity and protection. This pivotal role includes management of our 24/7 Security Operations, stakeholder management & liaison with internal teams and external partners/vendors.  

Job Details 

% of Time 

Major Responsibilities: 

• Security architecture: Support the design and implementation of secure IT architecture and systems. Develop, implement, and refine proactive security tactics and methods to counter emerging threats. 

• Risk management: Contribute to comprehensive cyber risk management framework that aligns with industry standards (e.g., NIST, ISO 27001) and incorporates the unique requirements of clients. Continuously identify, assess, and mitigate cyber risk exposure; implement and maintain robust risk management practices. 

• Leadership of the SOC: Manage the 24/7 SOC and its team of skilled technical staff. Oversee security operations including continuous security monitoring, incident response and remediation and the use of threat intelligence to ensure timely detection and mitigation of cyber threats, risks and vulnerabilities. 

------------------------------------------------- 

• Stakeholder engagement: Serve as the primary cybersecurity contact for all cybersecurity operations. Provide advice and support cybersecurity matters and ensure a high-level satisfaction. 

------------------------------------------------- 

• Cybersecurity strategy: Contribute to strategic planning and development of the company's cybersecurity services. Stay abreast of the regulatory environment and emerging cybersecurity trends, threats and technologies. 

• Compliance and governance: Ensure compliance with relevant cyber security regulations and standards (e.g., GDPR, PIPEDA, MFIPPA, PCI-DSS) from tooling perspective. Conduct regular vulnerability assessments, and compliance audits. 

------------------------------------------------- 

• Vendor management: Manage relationships with cybersecurity vendors and service providers. Ensure the quality and effectiveness of vendor products and services. 

• Continuous improvement: Promote a culture of innovation; identify and implement state-of-the-art security tools and techniques which will adapt to changes in the cyber threat landscape and technological advancements; provide continuous staff training and skill improvement. 

   40% 

40% 

10% 

20% 

10% 

Key Performance Indicators (KPIs): 

Security Incidents- Resolution time 

Achieving Project Milestones in time 

Timely completion of pro-active cybersecurity tasks (daily, weekly, monthly) 

Reduction of False positives 

Working Conditions: 

Full time, Hybrid 

Minimum Required Technical Skills / Qualifications 

Knowledge, Education, Training            

Bachelor’s degree in computer science, Information Technology, Cybersecurity, or related field. Master's degree preferred.  

Experience 

• Minimum 7 years in Information Technology management out of which 5 years should consist of hands-on experience in cybersecurity, in a leadership role, preferably managing a SOC/ Security Operations team. 

• Proficiency in security technologies, including SIEM, firewalls, IDS/IPS, endpoint protection, and vulnerability management tools.  

• Familiarity with cloud security in platforms such as AWS, Azure, or Google Cloud.  

• Strong knowledge of cybersecurity frameworks 

• Knowledge of DevSecOps practices and integration of security into development pipelines. 

Certifications 

Must to Have : Microsoft/ Azure Security Certifications: SC-200/500, AZ-500, Good to have : CISSP, CISM, CEH, or equivalent; relevant vendor certifications. 

Azure/ Microsoft 365     

Experience working on Microsoft 365 and Azure infrastructure is mandatory 

Minimum Required Behavioural / Soft Skills 

Communication 

Interpersonal, communication and presentation skills to effectively engage and build trust with clients and team members. 

Leadership     

Good Experience in technical leadership 

People Management 

Good exposure with people management/ stakeholder management