Cyber Security Lead

Goodman Masson is partnering with a new financial markets infrastructure venture under formation in Oman. Backed by prominent institutional investors, the business is building a greenfield platform from the ground up, and is now hiring at the build stage. This is a rare chance to help stand up critical market infrastructure from a blank sheet and then run what you have built.The roleAs Cyber Security Lead you keep the platform safe from attack and make sure it stays that way. In the build phase you design the security architecture from the ground up. In the run phase you operate that estate, watch it around the clock, and lead the response to any incident.What you will doDesign the security architecture from a blank sheet: identity and access, encryption at rest and in transit, network and endpoint controls, and the monitoring and detection stackBuild and run security monitoring and threat detection, set and tune detection rules, and run threat-hunting exercisesOwn identity, privileged access, and encryption to the standard a regulated financial platform requiresRun the vulnerability management cycle, coordinate penetration testing, and drive remediation to closeOwn security incident response end to end, from detection through containment, recovery, and reviewDesign the run-phase security operating model, author the playbooks, and build and lead the security team

What you will bringDegree in computer science, engineering, information security, or a related fieldAt least ten years in cyber and information security, with real time owning the security of a mission-critical platform end to endDirect experience designing and standing up the security capability of a mission-critical regulated platform from a blank sheet, not only running one built by othersDirect experience as a senior security authority in financial services or a comparable mission-critical regulated setting such as capital markets, banking, payments, or financial market infrastructureDeep expertise in security monitoring, threat detection, and incident response, including running or directing a SOC or managed security serviceStrong grasp of identity and access management, privileged access, and encryption for a regulated platformHands-on technical credibility and sound judgement under a live incidentFluent English, written and spokenAlso of interestExperience with financial market infrastructure such as a central securities depository, central counterparty, exchange, or payment systemFamiliarity with the CPMI-IOSCO Principles for Financial Market Infrastructures, especially the operational and cyber resilience principlesExperience securing connectivity to industry networks and market data services such as SWIFT, Bloomberg, and the international central securities depositoriesRelevant certifications such as CISSP, CISM, CEH, or GIAC