Senior Executive Manager - Cyber Security Strategy & Architecture

To design the standards for cybersecurity so that Bupa Arabia can grow and transform its business with security built in from the start.

Key Accountabilities:

1 - Cybersecurity Strategy & Roadmap:

·       Draft and maintain the cybersecurity strategy in line with business priorities, risk appetite and the CISO’s direction.

·       Build and maintain the multi-year roadmap, setting out investment priorities, outcomes, dependencies and owners.

·       Monitor the external threat, regulatory and technology landscape and recommend strategic adjustments.

2 - Enterprise Security Architecture:

·       Develop and maintain the target-state security architecture, technical standards and reference patterns across all environments.

·       Conduct design-stage architecture reviews of major initiatives and security engineering changes.

·       Assess architecture exceptions and technical debt, submitting material exceptions for risk review and CISO approval.

3 - Transformation & Portfolio Alignment:

·       Apply cybersecurity requirements and architecture guardrails to transformation, technology planning and delivery projects.

·       Work with business, technology, data, cloud and procurement teams to shape secure solution options early.

·       Recommend cybersecurity initiative and investment priorities based on business value, risk reduction and architectural fit.

4 - Cybersecurity Delivery:

·       Manage delivery of prioritized cybersecurity initiatives from planning through implementation, in line with the approved strategy.

·       Coordinate delivery teams, partners and stakeholders, managing scope, milestones, resources, budgets and risks.

·       Confirm operational handover with Cyber Security Operations, track benefits realization and escalate material issues to the CISO.

5 - Performance, Insights & Executive Reporting:

·       Track outcome measures for strategy execution and architecture adoption.

·       Prepare progress reports on strategy delivery, investment performance and decisions required.

·       Provide strategy and architecture input to the CISO’s leadership, Board and regulatory reporting.

6 - Stakeholder Management:

·       Maintain effective working relationships with technology, risk, business and subsidiary stakeholders.

·       Engage business and technology stakeholders early to align cybersecurity priorities, roadmaps and delivery.

·       Coordinate with BISOs across functions and subsidiaries to promote consistent security practices.

·       Review draft cybersecurity policies for technical feasibility and support the CISO in governance forums.

·       Communication skills

·       8 years of experience

·       Risk based approach

·       Strategic thinking

·       Adherence to confidentiality of data

·       Multitasking

·       Understand Risk assessment and management methodology.

·       Experience in developing and implementing enterprise governance, risk, and compliance strategy and solutions.

·       Experience in Security project management and planning.

·       Bachelor’s degree in Information Technology or Cybersecurity (required)

·       Master’s degree in Information Security or Cybersecurity (preferred)

·       Certification in information security domain.

·       CISSP

·       CISA

·       SABSA Foundation

·       ISSAP

·       Experience in information security

·       Experience in cloud-based platforms (AWS, Azure, Google Cloud) in an enterprise environment

·       Knowledge of Cyber and cloud security standard frameworks, architecture, design, operations, controls, technology, solutions, and service orchestration.

Bachelor’s degree in Information Technology or Cybersecurity