Head of Cyber Security

Introduction

Cartrack, a world-leading smart mobility Software-as-a-Service tech company operating across 27 countries, is looking for a Head of Cyber Security to be responsible for defining, leading, and executing the organization’s global cybersecurity strategy. You will be responsible for safeguarding infrastructure, applications, networks, data, and business-critical platforms across a large-scale SaaS environment. This role requires a balance of technical depth, strategic vision, leadership maturity, and security governance expertise. Duties & Responsibilities

Strategic Leadership & Governance

• Develop, own, and drive the organization’s Cyber Security strategy, roadmap, policies, and standards. • Establish and mature the security operating model, including governance frameworks, risk management processes, and compliance programs. • Ensure alignment between security initiatives, business objectives, technology teams, and executive stakeholders. • Present security posture, risks, and initiatives to senior leadership and board-level forums. Security Architecture & Engineering:

• Oversee the effectiveness of all security platforms (e.g., SIEM, PAM, EDR/XDR, vulnerability scanners, application security tools). • Define and review security architecture for infrastructure, networks, cloud, and applications to ensure a secure-by-design approach. • Lead the design, implementation, and continuous improvement of security systems, tooling, and automation, including upgrades and modernization initiatives. • Perform or guide technical security reviews of new systems, products, architectures, and third-party integrations. Threat Management, Detection & Response:

• Lead enterprise-wide monitoring, detection, response, and threat-hunting capabilities. • Manage security incidents end-to-end, including root cause analysis, remediation, and post-incident reporting. • Oversee simulations of breach and recovery scenarios (e.g., red-team exercises, tabletop simulations). Risk, Compliance & Assurance:

• Ensure compliance with local, national, and international regulations, including privacy and data protection requirements. • Conduct continuous risk assessments, monitor control effectiveness, and implement improvements. • Lead security vendor evaluations, POCs, and procurement processes. Collaboration & Stakeholder Enablement:

• Work closely with engineering, infrastructure, cloud, product, and data teams to embed security best practices.
• Educate and empower colleagues across the business on security awareness, secure engineering, and safe data practices.
• Challenge existing practices and introduce improvements, automation, and modern frameworks across technology teams.

Desired Experience & Qualification

• Bachelor’s degree in Computer Science, Engineering, or equivalent industry experience.
• Relevant security certifications (e.g., CISSP, CISM, CEH, OSCP, CompTIA Security ).
• Ability to operate under pressure, manage multiple priorities, and lead teams in a fast-paced environment.
• Eligibility for or possession of security clearance is an advantage.
• 8-12 years’ experience in cybersecurity, infrastructure security, or security engineering roles, with proven leadership responsibilities.
• Deep technical knowledge across operating system security, database security, networking, and cloud/ hybrid environments.
• Strong understanding of cybersecurity frameworks, methodologies, and secure architecture principles.
• Significant experience with SIEM, network monitoring, endpoint protection, vulnerability management, and IAM/PAM systems.
• Solid grasp of low-level networking and the TCP/IP stack (advantageous).
• Experience in SaaS or large-scale, high-availability environments is highly beneficial.

This job description is intended to convey information essential to understanding the scope of the role. It is not exhaustive and may be supplemented as necessary to meet the organization’s needs.