Senior Executive Manager - Cyber Security Strategy & Architecture

Job Description To design the standards for cybersecurity so that Bupa Arabia can grow and transform its business with security built in from the start. Key Accountabilities: 1 - Cybersecurity Strategy & Roadmap: • Draft and maintain the cybersecurity strategy in line with business priorities, risk appetite and the CISO’s direction. • Build and maintain the multi-year roadmap, setting out investment priorities, outcomes, dependencies and owners. • Monitor the external threat, regulatory and technology landscape and recommend strategic adjustments. 2 - Enterprise Security Architecture: • Develop and maintain the target-state security architecture, technical standards and reference patterns across all environments. • Conduct design-stage architecture reviews of major initiatives and security engineering changes. • Assess architecture exceptions and technical debt, submitting material exceptions for risk review and CISO approval. 3 - Transformation & Portfolio Alignment: • Apply cybersecurity requirements and architecture guardrails to transformation, technology planning and delivery projects. • Work with business, technology, data, cloud and procurement teams to shape secure solution options early. • Recommend cybersecurity initiative and investment priorities based on business value, risk reduction and architectural fit. 4 - Cybersecurity Delivery: • Manage delivery of prioritized cybersecurity initiatives from planning through implementation, in line with the approved strategy. • Coordinate delivery teams, partners and stakeholders, managing scope, milestones, resources, budgets and risks. • Confirm operational handover with Cyber Security Operations, track benefits realization and escalate material issues to the CISO. 5 - Performance, Insights & Executive Reporting: • Track outcome measures for strategy execution and architecture adoption. • Prepare progress reports on strategy delivery, investment performance and decisions required. • Provide strategy and architecture input to the CISO’s leadership, Board and regulatory reporting. 6 - Stakeholder Management: • Maintain effective working relationships with technology, risk, business and subsidiary stakeholders. • Engage business and technology stakeholders early to align cybersecurity priorities, roadmaps and delivery. • Coordinate with BISOs across functions and subsidiaries to promote consistent security practices. • Review draft cybersecurity policies for technical feasibility and support the CISO in governance forums. Skills • Communication skills • 8 years of experience • Risk based approach • Strategic thinking • Adherence to confidentiality of data • Multitasking • Understand Risk assessment and management methodology. • Experience in developing and implementing enterprise governance, risk, and compliance strategy and solutions. • Experience in Security project management and planning. • Bachelor’s degree in Information Technology or Cybersecurity (required) • Master’s degree in Information Security or Cybersecurity (preferred) • Certification in information security domain. • CISSP • CISA • SABSA Foundation • ISSAP • Experience in information security • Experience in cloud-based platforms (AWS, Azure, Google Cloud) in an enterprise environment • Knowledge of Cyber and cloud security standard frameworks, architecture, design, operations, controls, technology, solutions, and service orchestration. Education Bachelor’s degree in Information Technology or Cybersecurity

1 - Cybersecurity Strategy & Roadmap: Draft and maintain the cybersecurity strategy in line with business priorities, risk appetite and the CISO’s direction. Build and maintain the multi-year roadmap, setting out investment priorities, outcomes, dependencies and owners. Monitor the external threat, regulatory and technology landscape and recommend strategic adjustments. 2 - Enterprise Security Architecture: Develop and maintain the target-state security architecture, technical standards and reference patterns across all environments. Conduct design-stage architecture reviews of major initiatives and security engineering changes. Assess architecture exceptions and technical debt, submitting material exceptions for risk review and CISO approval. 3 - Transformation & Portfolio Alignment: Apply cybersecurity requirements and architecture guardrails to transformation, technology planning and delivery projects. Work with business, technology, data, cloud and procurement teams to shape secure solution options early. Recommend cybersecurity initiative and investment priorities based on business value, risk reduction and architectural fit. 4 - Cybersecurity Delivery: Manage delivery of prioritized cybersecurity initiatives from planning through implementation, in line with the approved strategy. Coordinate delivery teams, partners and stakeholders, managing scope, milestones, resources, budgets and risks. Confirm operational handover with Cyber Security Operations, track benefits realization and escalate material issues to the CISO. 5 - Performance, Insights & Executive Reporting: Track outcome measures for strategy execution and architecture adoption. Prepare progress reports on strategy delivery, investment performance and decisions required. Provide strategy and architecture input to the CISO’s leadership, Board and regulatory reporting. 6 - Stakeholder Management: Maintain effective working relationships with technology, risk, business and subsidiary stakeholders. Engage business and technology stakeholders early to align cybersecurity priorities, roadmaps and delivery. Coordinate with BISOs across functions and subsidiaries to promote consistent security practices. Review draft cybersecurity policies for technical feasibility and support the CISO in governance forums.