Head of IT Security Operation

We have an urgent requirement for Head of IT Security Operation in banking domain(preferred) is required for our banking client in Oman Manage SOC operations, monitor security threats, and lead incident detection, investigation, containment, and recovery activities..--Must Oversee vulnerability management, threat hunting, risk assessments, and implementation of security controls across infrastructure, endpoints, applications, and cloud environments..--Must Drive compliance with cybersecurity standards and regulations (ISO 27001, NIST, PCI-DSS, etc.), support audits, and maintain security policies and procedures..--Must Manage security teams, vendors, and key cybersecurity tools (SIEM, EDR, IAM, DLP, Cloud Security), while building a resilient and security-aware organization.--Must Role Summary The IT Security Operations Head is responsible for protecting the organization's information assets by leading cybersecurity operations, threat detection, incident response, vulnerability management, and security governance activities. The role ensures the confidentiality, integrity, and availability of systems, networks, applications, and data while maintaining compliance with regulatory and business requirements. Key ResponsibilitiesSecurity Operations Management • Lead and manage Security Operations Center (SOC) activities. • Monitor security events, alerts, and incidents across enterprise environments. • Establish and maintain 24x7 security monitoring capabilities. • Develop security operational procedures, policies, and controls. Threat Detection & Incident Response • Lead cybersecurity incident detection, investigation, containment, and recovery activities. • Manage incident response plans, playbooks, and escalation procedures. • Conduct root cause analysis and implement preventive measures. • Coordinate with internal teams and external agencies during major security incidents. Vulnerability & Risk Management • Oversee vulnerability assessments and penetration testing programs. • Ensure timely remediation of identified security vulnerabilities. • Conduct cyber risk assessments and recommend mitigation strategies. • Monitor security posture and emerging threats. Security Technology Management • Manage security solutions such as: • SIEM • EDR/XDR • IDS/IPS • Firewall & Network Security • Email Security • Identity & Access Management (IAM) • Data Loss Prevention (DLP) • Cloud Security Platforms • Evaluate and implement new cybersecurity tools and technologies. Governance, Risk & Compliance • Ensure compliance with security standards and regulations (ISO 27001, NIST, GDPR, PCI-DSS, SOC, etc.). • Support internal and external security audits. • Maintain security policies, standards, and procedures. • Track and report cybersecurity KPIs and risk metrics. Team Leadership • Lead and mentor information security analysts and engineers. • Develop cybersecurity skills and awareness within the team. • Manage security vendors, MSSPs, and external consultants. • Establish a culture of security awareness and continuous improvement. Business Continuity & Resilience • Support disaster recovery and business continuity planning. • Conduct security drills and incident simulations. • Ensure organizational readiness against cyber threats and ransomware attacks. QualificationsEducation • Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, or related field. • Master's Degree preferred. Experience • 10–15+ years of IT experience with at least 5 years in cybersecurity operations leadership. • Experience managing SOC operations and security incident response. • Strong background in network security, endpoint security, and cloud security. • Experience with security compliance and audit programs. • Proven experience leading cybersecurity teams and managing security vendors. Technical Skills • Security Operations Center (SOC) • SIEM Tools (Microsoft Sentinel, Splunk, QRadar, ArcSight) • Endpoint Security (Defender, CrowdStrike, SentinelOne) • Vulnerability Management (Nessus, Qualys, Rapid7) • Cloud Security (Azure, AWS, Google Cloud) • Network Security & Firewalls • IAM / PAM Solutions • Incident Response & Digital Forensics • Threat Intelligence & Threat Hunting • Security Automation & SOAR Key Competencies • Cybersecurity Leadership • Incident Management • Risk Assessment & Mitigation • Problem Solving & Analytical Thinking • Stakeholder Management • Crisis Management • Communication & Reporting • Team Development • Decision Making Under Pressure Preferred Certifications • CISSP • CISM • CISA • CEH • GIAC Certifications • ISO 27001 Lead Implementer/Auditor • Microsoft Security Certifications (SC-100, SC-200) • CCSP Skills: security,operations,bank

Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, or related field. Master's Degree preferred. 10–15+ years of IT experience with at least 5 years in cybersecurity operations leadership. Experience managing SOC operations and security incident response. Strong background in network security, endpoint security, and cloud security. Experience with security compliance and audit programs. Proven experience leading cybersecurity teams and managing security vendors.

Security Operations Management: Lead and manage Security Operations Center (SOC) activities. Monitor security events, alerts, and incidents across enterprise environments. Establish and maintain 24x7 security monitoring capabilities. Develop security operational procedures, policies, and controls. Threat Detection & Incident Response: Lead cybersecurity incident detection, investigation, containment, and recovery activities. Manage incident response plans, playbooks, and escalation procedures. Conduct root cause analysis and implement preventive measures. Coordinate with internal teams and external agencies during major security incidents. Vulnerability & Risk Management: Oversee vulnerability assessments and penetration testing programs. Ensure timely remediation of identified security vulnerabilities. Conduct cyber risk assessments and recommend mitigation strategies. Monitor security posture and emerging threats. Security Technology Management: Manage security solutions such as SIEM, EDR/XDR, IDS/IPS, Firewall & Network Security, Email Security, IAM, DLP, Cloud Security Platforms. Evaluate and implement new cybersecurity tools and technologies. Governance, Risk & Compliance: Ensure compliance with security standards and regulations (ISO 27001, NIST, GDPR, PCI-DSS, SOC, etc.). Support internal and external security audits. Maintain security policies, standards, and procedures. Track and report cybersecurity KPIs and risk metrics. Team Leadership: Lead and mentor information security analysts and engineers. Develop cybersecurity skills and awareness within the team. Manage security vendors, MSSPs, and external consultants. Establish a culture of security awareness and continuous improvement. Business Continuity & Resilience: Support disaster recovery and business continuity planning. Conduct security drills and incident simulations. Ensure organizational readiness against cyber threats and ransomware attacks.