Digital Security Programme Manager

Key Responsibilities:

Programme Leadership & Strategy:

• Lead the planning, design, and execution of digital security programmes in alignment with the organizations overall business objectives and risk management strategies.
• Develop and communicate clear objectives, milestones, timelines, and budgets for security-related projects.
• Act as the main point of contact for the programme, ensuring stakeholders are engaged and informed at every stage of the project.

Risk Management & Threat Intelligence:

• Assess digital security risks across the organization and propose mitigation strategies.
• Implement proactive threat intelligence mechanisms to detect, identify, and respond to potential cyber threats.
• Oversee risk assessments and vulnerability management processes, ensuring timely remediation of identified risks.

Cross-functional Collaboration:

• Work with IT, development, legal, compliance, and other departments to integrate security practices across all business functions.
• Facilitate collaboration between security operations, architecture, and engineering teams to ensure secure infrastructure and digital solutions.
• Provide security guidance during the development and deployment of new digital products and services.

Compliance & Regulatory Oversight:

• Ensure that digital security programmes adhere to relevant industry standards, regulations, and best practices (e.g., GDPR, HIPAA, NIST, ISO 27001).
• Monitor compliance with internal and external cybersecurity policies, reporting any gaps to senior leadership.
• Coordinate audits, assessments, and security reviews as needed to maintain regulatory compliance.

Team Management & Development:

• Lead and mentor a team of security professionals, fostering a collaborative, high-performance culture.
• Provide training, support, and development opportunities to team members to enhance their technical and leadership skills.
• Manage resource allocation and personnel to ensure timely delivery of security initiatives.

Incident Response & Crisis Management:

• Lead the response to digital security incidents, including data breaches, cyberattacks, and system failures.
• Develop, implement, and regularly update incident response plans, conducting simulations and post-incident reviews.
• Collaborate with legal, PR, and management teams to mitigate the impact of incidents on the organization's reputation and operations.

Reporting & Communication:

• Provide regular updates on programme status, risks, and achievements to senior leadership and stakeholders.
• Prepare detailed reports for executives, summarizing key performance indicators (KPIs), threats, and ongoing security initiatives.
• Create presentations and documentation for non-technical stakeholders to explain security risks, strategies, and outcomes effectively.

Key Skills & Qualifications:

Educational Requirements:

• Bachelors degree in Cybersecurity, Information Technology, Computer Science, or a related field. Masters degree preferred.
• Relevant certifications such as CISSP, CISM, PMP, or equivalent are highly desired.

Experience

• Minimum of 5-7 years of experience in cybersecurity, with at least 3 years in a managerial or programme management role.
• Proven experience managing large-scale digital security programmes and leading cross-functional teams.
• Strong understanding of cybersecurity frameworks, methodologies, and industry standards.
• Experience with risk management, security compliance, and governance.

Technical Skills:

• Strong knowledge of security tools and technologies such as SIEM, firewalls, encryption, vulnerability management, and incident response tools.
• Familiarity with cloud security, network security, and secure software development practices.
• Expertise in digital threat intelligence, penetration testing, and data protection.