Cybersecurity Manager

Location: Doha, Qatar; Kazakhstan, Kazakhstan

Department: Cyber Security

Experience: 6+

1. Operational Leadership & Program Execution

• Translate the cybersecurity strategy and roadmap set by the Head of Cybersecurity into operational plans, priorities, and day-to-day execution schedules.
• Coordinate execution across security operations, vulnerability management, application security, cloud security, and identity security workstreams.
• Track progress of security initiatives, projects, and remediation activities, and escalate delays, resourcing gaps, or emerging risks to the Head of Cybersecurity.
• Ensure security processes, runbooks, and procedures are documented, current, and consistently followed by the team.
• Support planning and reporting on cybersecurity capacity, workload, and resourcing needs.

2. Security Operations & Incident Response

• Manage day-to-day security monitoring and detection activities, ensuring alerts are triaged, investigated, and resolved within agreed timelines.
• Act as the operational incident commander for security incidents, coordinating containment, investigation, and remediation, and escalating significant or high-severity incidents to the Head of Cybersecurity promptly.
• Ensure incident documentation, timelines, and lessons-learned reports are completed for all incidents.
• Coordinate and participate in incident-response tabletop exercises and technical simulations.

3. Vulnerability & Exposure Management

• Manage the day-to-day vulnerability management program across applications, infrastructure, cloud, and endpoints.
• Ensure vulnerabilities are triaged, prioritized, assigned, and tracked to remediation against agreed SLAs.
• Coordinate with engineering, infrastructure, and platform teams to drive timely remediation of critical and high-risk findings.
• Monitor overdue items, recurring weaknesses, and exceptions, and escalate material or stalled risks to the Head of Cybersecurity.
• Support coordination of penetration tests, scans, and security assessments, and track resulting findings to closure.

4. Application, Cloud & DevSecOps Security Oversight

• Oversee day-to-day implementation of application security and DevSecOps practices, including code scanning, dependency checks, and secure release gates.
• Monitor cloud security posture and coordinate remediation of misconfigurations, excessive permissions, and exposed assets with infrastructure and platform teams.
• Support engineering and product teams with practical security guidance during design and development, escalating architecture-level or higher-risk decisions to the Head of Cybersecurity.
• Track adoption and effectiveness of security tooling embedded in CI/CD pipelines and development workflows

5. Identity, Access & Data Security

• Oversee operational execution of access reviews, joiner/mover/leaver processes, and privileged-access controls.
• Monitor for dormant accounts, excessive privileges, and access-control weaknesses, and drive remediation with system and application owners.
• Support implementation of data-security controls, including access control, encryption, and data-loss-prevention monitoring.
• Support investigation of suspected data-exposure or unauthorized-access incidents.

6. Governance, Compliance & Third-Party Security Execution

• Support execution of the security governance framework, ensuring policies, standards, and procedures defined by the Head of Cybersecurity are implemented and followed operationally.
• Coordinate evidence collection, audits, and assessments related to ISO/IEC 27001, PCI DSS, and other applicable frameworks.
• Track findings from audits and assessments through to remediation, and maintain accurate compliance records.
• Coordinate day-to-day third-party security assessments and monitor remediation of vendor-related risks.

7. Security Awareness & Reporting

• Coordinate delivery of security awareness training, phishing simulations, and role-specific enablement programs.
• Track behavioral metrics and awareness-program effectiveness, and report trends to the Head of Cybersecurity.
• Prepare regular operational reporting on security metrics, KPIs, incidents, vulnerabilities, and remediation status for the Head of Cybersecurity and relevant stakeholders.

8. Team Leadership & Development

• Directly manage and coach a team of security analysts, engineers, and specialists across security operations, vulnerability management, and related functions.
• Set clear day-to-day expectations, priorities, and performance objectives for the team, aligned with direction from the Head of Cybersecurity.
• Conduct performance reviews, identify development needs, and support career growth for team members.
• Support hiring, onboarding, and knowledge continuity within the team.
• Foster a culture of ownership, technical excellence, and collaboration within the operational security team.

• Bachelor's / Master’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or a related discipline, or equivalent relevant professional experience.
• 4-7 years of experience in the cybersecurity field, including prior experience leading or coordinating a team or workstream.
• Hands-on experience across several security domains such as security operations, vulnerability management, incident response, application security, cloud security, or identity and access management.
• Practical experience managing security tools, processes, and day-to-day operations in a technology-driven organization.
• Working knowledge of cloud environments, modern software-development practices, CI/CD, and enterprise application architectures.
• Experience supporting security governance, audits, or compliance activities.
• Strong organizational, coordination, and problem-solving skills, with the ability to manage multiple priorities under time pressure.
• Good communication skills, with the ability to work effectively with technical teams and non-technical stakeholders.

Technical & Functional Competencies

• Security operations and incident response management.
• Vulnerability and exposure management.
• Application, cloud, and DevSecOps security oversight.
• Identity and privileged-access security.
• Data security and data-loss prevention.
• Security governance, audit, and compliance support (ISO 27001, PCI DSS).
• Third-party security assessment coordination.
• Security awareness program management.
• Security metrics, reporting, and KPI tracking.
• Team leadership and operational management.

• Experience in a high-growth technology, e-commerce, marketplace, fintech, logistics, payments, or super-app environment.
• Experience with AWS, GCP, Kubernetes, CI/CD environments, and modern application architectures.
• Experience supporting ISO/IEC 27001, PCI DSS, or similar assurance and compliance programs.
• Experience with security automation, SOAR platforms, or security tool integration.
• Relevant professional certifications such as CISSP, CISM, CCSP, GIAC certifications, or equivalent credentials.