Head of IT Security Operation

We have an urgent requirement for Head of IT Security Operation in banking domain(preferred) is required for our banking client in Oman Manage SOC operations, monitor security threats, and lead incident detection, investigation, containment, and recovery activities..--MustOversee vulnerability management, threat hunting, risk assessments, and implementation of security controls across infrastructure, endpoints, applications, and cloud environments..--MustDrive compliance with cybersecurity standards and regulations (ISO 27001, NIST, PCI-DSS, etc.), support audits, and maintain security policies and procedures..--MustManage security teams, vendors, and key cybersecurity tools (SIEM, EDR, IAM, DLP, Cloud Security), while building a resilient and security-aware organization.--MustRole SummaryThe IT Security Operations Head is responsible for protecting the organization's information assets by leading cybersecurity operations, threat detection, incident response, vulnerability management, and security governance activities. The role ensures the confidentiality, integrity, and availability of systems, networks, applications, and data while maintaining compliance with regulatory and business requirements.Key ResponsibilitiesSecurity Operations ManagementLead and manage Security Operations Center (SOC) activities.Monitor security events, alerts, and incidents across enterprise environments.Establish and maintain 24x7 security monitoring capabilities.Develop security operational procedures, policies, and controls.Threat Detection & Incident ResponseLead cybersecurity incident detection, investigation, containment, and recovery activities.Manage incident response plans, playbooks, and escalation procedures.Conduct root cause analysis and implement preventive measures.Coordinate with internal teams and external agencies during major security incidents.Vulnerability & Risk ManagementOversee vulnerability assessments and penetration testing programs.Ensure timely remediation of identified security vulnerabilities.Conduct cyber risk assessments and recommend mitigation strategies.Monitor security posture and emerging threats.Security Technology ManagementManage security solutions such as:SIEMEDR/XDRIDS/IPSFirewall & Network SecurityEmail SecurityIdentity & Access Management (IAM)Data Loss Prevention (DLP)Cloud Security PlatformsEvaluate and implement new cybersecurity tools and technologies.Governance, Risk & ComplianceEnsure compliance with security standards and regulations (ISO 27001, NIST, GDPR, PCI-DSS, SOC, etc.).Support internal and external security audits.Maintain security policies, standards, and procedures.Track and report cybersecurity KPIs and risk metrics.Team LeadershipLead and mentor information security analysts and engineers.Develop cybersecurity skills and awareness within the team.Manage security vendors, MSSPs, and external consultants.Establish a culture of security awareness and continuous improvement.Business Continuity & ResilienceSupport disaster recovery and business continuity planning.Conduct security drills and incident simulations.Ensure organizational readiness against cyber threats and ransomware attacks.QualificationsEducationBachelor's Degree in Information Technology, Cybersecurity, Computer Science, or related field.Master's Degree preferred.Experience10–15+ years of IT experience with at least 5 years in cybersecurity operations leadership.Experience managing SOC operations and security incident response.Strong background in network security, endpoint security, and cloud security.Experience with security compliance and audit programs.Proven experience leading cybersecurity teams and managing security vendors.Technical SkillsSecurity Operations Center (SOC)SIEM Tools (Microsoft Sentinel, Splunk, QRadar, ArcSight)Endpoint Security (Defender, CrowdStrike, SentinelOne)Vulnerability Management (Nessus, Qualys, Rapid7)Cloud Security (Azure, AWS, Google Cloud)Network Security & FirewallsIAM / PAM SolutionsIncident Response & Digital ForensicsThreat Intelligence & Threat HuntingSecurity Automation & SOARKey CompetenciesCybersecurity LeadershipIncident ManagementRisk Assessment & MitigationProblem Solving & Analytical ThinkingStakeholder ManagementCrisis ManagementCommunication & ReportingTeam DevelopmentDecision Making Under PressurePreferred CertificationsCISSPCISMCISACEHGIAC CertificationsISO 27001 Lead Implementer/AuditorMicrosoft Security Certifications (SC-100, SC-200)CCSPSkills: security,operations,bank