Senior Executive Manager - Cyber Security Strategy & Architecture

About the role

Bupa Arabia is looking for a Senior Executive Manager to design the standards for cybersecurity so that the business can grow and transform with security built in from the start. The role covers strategy, architecture, delivery and stakeholder management, and sits at middle-management level.

Key responsibilities

• Cybersecurity strategy and roadmap: draft and maintain the strategy in line with business priorities, risk appetite and the CISO's direction; build a multi-year roadmap with investment priorities, outcomes, dependencies and owners; monitor threats, regulation and technology and recommend adjustments.
• Enterprise security architecture: develop and maintain the target-state architecture, technical standards and reference patterns; run design-stage architecture reviews of major initiatives; assess exceptions and technical debt and submit material ones for risk review and CISO approval.
• Transformation and portfolio alignment: apply cybersecurity requirements and guardrails to transformation, technology planning and delivery projects; work with business, technology, data, cloud and procurement teams early; recommend initiative priorities by business value, risk reduction and architectural fit.
• Cybersecurity delivery: manage delivery of prioritized initiatives from planning to implementation, coordinating teams, partners and stakeholders on scope, milestones, resources, budgets and risks; confirm handover with Cyber Security Operations, track benefits and escalate material issues to the CISO.
• Performance, insights and executive reporting: track outcome measures, prepare progress reports on strategy delivery and investment performance, and give input to the CISO, Board and regulators.
• Stakeholder management: build relationships with technology, risk, business and subsidiary stakeholders, coordinate with BISOs across functions and subsidiaries, and review draft cybersecurity policies for technical feasibility.

Required profile

• 8 years of experience; minimum 8 years stated.
• Bachelor's degree in Information Technology or Cybersecurity (required); Master's in Information Security or Cybersecurity preferred.
• Experience developing and implementing enterprise governance, risk and compliance strategy and solutions.
• Experience in security project management and planning, and in information security.
• Experience with cloud-based platforms (AWS, Azure, Google Cloud) in an enterprise environment.
• Knowledge of cyber and cloud security frameworks, architecture, design, operations, controls, technology, solutions and service orchestration.

Required skills

• CISSP, CISA, SABSA Foundation, ISSAP certification (listed)
• Risk assessment and management methodology
• Communication, strategic thinking and multitasking