Cybersecurity Manager

Job description

Summary: LMKR is embarking on a major technological evolution, and we need a visionary Cybersecurity Manager to secure the path forward. You will be the driving force behind a sweeping security transformation program— helping take our existing IT infrastructure into a highly secure, SaaS-driven environment. You will oversee internal security operations globally, bridging distributed technical teams across multiple geographic locations. Your mission is to continuously assess, enhance and manage a modern, proactive defence strategy anchored in a zero-trust, mobile-first, cloud-first, and AI-first controls framework, ensuring we securely integrate and deploy agentic AI technologies while maintaining rigorous international compliance standards. Key Responsibilities: Security Transformation & Modernization Support the strategic migration of legacy on-premises security controls to a modernized, cloud-native SaaS architecture. Implement a comprehensive Zero-Trust Architecture (ZTA) tailored for a highly mobile, globally distributed workforce. Champion a "security by design" culture, integrating security seamlessly into cloud-first and mobile-first initiatives. AI & Hybrid-Cloud Security Enforce security guardrails for hybrid-cloud environments (AWS, Azure, and on-prem edge locations). Enable operational security controls for frontier agentic AI systems, ensuring data privacy, model integrity, and protection against AI-specific vulnerabilities. Establish AI-native security controls, leveraging machine learning to automate threat detection and response operations. Global Security Operations (SecOps) Oversee ongoing internal security operations, threat hunting, and incident response across all global LMKR offices. Manage modern, cloud-native XDR and SIEM/SOAR toolsets for endpoint, network, and cloud detection and response. Act as the primary security liaison for distributed technical and engineering teams, ensuring uniform security standards regardless of location. Own Incident Response through investigations and remediation of security incidents affecting systems and applications. Governance, Risk, & Compliance (GRC) Drive and maintain rigorous compliance certifications, specifically leading the organization's ISO 27001 readiness and auditing processes towards automated continuous compliance. Conduct regular risk assessments, vendor security evaluations for new SaaS platforms, and internal audits. Maintain and enforce information security policies that reflect modern technology landscapes without slowing down business agility. Requirements Digital Transformation: Proven track record of leading legacy-to-cloud security transformations and implementing Zero-Trust frameworks. Cloud & AI Expertise: Deep understanding of hybrid-cloud security architectures. Understanding of adversarial ML, model robustness, and model auditing solutions. Familiarity with securing vibe-coding, MLOps, LLMs, GenAI pipelines, and agentic workflows is highly preferred. Compliance Mastery: Hands-on experience achieving and maintaining ISO 27001 certification. Familiarity with NIST CSF, CMMC, DORA or similar frameworks is a plus. Technology Focus: Strong command over modern SaaS security platforms (XDR, SIEM, IAM, SASE, CSPM, EASM, and CNAPP). Communication: Exceptional ability to communicate complex security concepts to non-technical stakeholders and foster collaboration across diverse, globally scattered executive & engineering teams. Qualifications: At least 8 years of progressive experience in full-time cybersecurity roles, with at least 3 years in a managerial or architectural role overseeing security operations in a large enterprise. Minimum Degree: Bachelors in Cybersecurity, Computer Science/Engineering Preferred Degree: Masters in Cybersecurity, Computer Science/Engineering, AI/ML, Data Science Minimum certifications: (For Candidates with a Non-Cybersecurity Educational Background) - Certified Information Systems Security Professional (CISSP) Certified Cloud Security Professional (CCSP) Preferred certifications: - GIAC Machine Learning Engineer (MLE) - OffSec AI Red Teamer (OSAI) - Claude Certified Architect (CCA) Location: Islamabad (Hybrid)