TMO_ Cyber Security Leader

We are looking for an experienced Cyber Security Leader to lead and strengthen the security posture of our digital banking, cloud, and enterprise technology platforms. The successful candidate will play a critical role in embedding security by design, ensuring regulatory compliance, and protecting business-critical systems and customer data.

Key Responsibilities

Cyber Security Strategy & Governance

• Develop and maintain enterprise cybersecurity strategies, policies, standards, and procedures.
• Ensure security requirements are embedded into technology modernization and digital transformation initiatives.
• Participate in architecture reviews and provide security guidance to technology and business stakeholders.

Security Architecture & Design

• Design and assess security controls for cloud platforms (AWS preferred), including IAM, network security, encryption, and key management.
• Define and implement Zero Trust security principles across enterprise environments.
• Review security architecture for digital banking platforms, customer-facing applications, and critical technology solutions.
• Evaluate security risks associated with APIs, third-party integrations, and embedded banking ecosystems.

Application & Cloud Security

• Collaborate with development teams to integrate security into DevSecOps and CI/CD pipelines.
• Assess and improve security controls for containerized and Kubernetes-based environments.
• Conduct threat modeling and security design reviews throughout the solution lifecycle.
• Oversee vulnerability assessments and penetration testing activities.

Security Operations & Incident Response

• Support the development and enhancement of SOC and SIEM capabilities.
• Monitor, investigate, and respond to security incidents and cyber threats.
• Lead root cause analysis and recommend remediation and preventive actions.
• Develop and validate cyber incident response and disaster recovery scenarios.

Risk & Compliance

• Ensure compliance with regulatory requirements and industry standards, including ISO 27001, NIST Cybersecurity Framework, PCI DSS, and applicable banking regulations.
• Support the implementation and maintenance of Information Security Management Systems (ISMS).
• Conduct security risk assessments and recommend appropriate mitigation controls.

Security Awareness & Advisory

• Promote cybersecurity awareness and best practices across the organization.
• Provide security consultancy to project teams and stakeholders.
• Develop security guidelines, standards, and technical recommendations for emerging technologies.

Preferred Qualifications

• 8+ years of experience in Cyber Security, Information Security, or Security Architecture.
• Strong knowledge of AWS Security, Zero Trust Architecture, IAM, API Security, and Cloud Security.
• Experience with SOC/SIEM platforms, vulnerability management, and incident response.
• Relevant certifications such as CISSP, CISM, OSCP, CEH, AWS Certified Security Specialty, or ISO 27001 certifications are highly desirable.