Director - Information Security

Job Description:

The Director - Information Security will lead the cyber defence capabilities and help protect customer, business, technology, and enterprise assets across the organisation and associated entities. The role owns the strategy, governance, and operational effectiveness of the Security Operations Centre (SOC), incident response, threat detection and hunting, vulnerability and exposure management, cloud security operations, security engineering, and cyber resilience. The incumbent will partner with Product Engineering, Cloud Operations, Infrastructure, DevSecOps, Privacy, Risk, Compliance, Legal, Communications, and security stakeholders.

Strategy, Governance and Leadership:

- Define and execute the Security Operations strategy, operating model, capability roadmap, and annual priorities aligned with business and cybersecurity objectives.

- Establish governance mechanisms, policies, standards, procedures, service-level objectives, and management reporting for cyber defence operations.

- Provide clear security posture, incident, vulnerability, control-effectiveness, and operational-risk updates to the CISO, executive leadership, and relevant governance forums.

- Lead financial planning, technology investments, vendor governance, and capacity planning for Security Operations.

24x7 Security Operations:

- Lead the 24x7 in-house SOC and ensure continuous monitoring of cloud services, endpoints, servers, identities, networks, business applications, and customer-facing digital platforms.

- Drive effective triage, investigation, escalation, containment, and reporting through standardised playbooks and well-defined accountability.

- Continuously improve SIEM, EDR/XDR, SOAR, email security, network security, and other monitoring technologies.

- Mature detection coverage using threat-informed methodologies, including MITRE ATT&CK mapping, measurable use-case coverage, and regular control validation.

Requirements:

- Bachelor's degree in Computer Science/ Engineering, or a related discipline.

- A master's degree in cybersecurity, technology, or business administration is preferred.

- 15+ years of cybersecurity experience, including significant leadership responsibility in Security Operations and Incident Response.

- 8+ years leading enterprise cyber defence, SOC, incident response, threat detection, or related operational security functions.

- Proven experience leading a large-scale, always-on SOC in a cloud-first or digital business environment.

- Experience in digital platforms, eCommerce, fintech, payments, financial services, telecommunications, or another regulated technology-led environment.

- Demonstrated ability to manage significant cyber incidents and communicate effectively with executive leadership and governance forums.