Manager - Cyber Security

About the role

A digital-first company serving 40,000+ users across Sri Lanka, India and Bangladesh is looking for a Manager - Cyber Security to design and implement scalable security architectures across cloud-native platforms, smart factories and mission-critical supply chains. The role covers the full stack, from cloud infrastructure and application security to operational technology on the factory floor, and works closely with executive leadership.

Key responsibilities

• Drive Zero Trust adoption across identity, devices, data, applications and networks
• Modernize the SOC, including threat intelligence, detection engineering, purple teaming and incident response
• Embed security in CI/CD pipelines via DevSecOps, SBOMs, secrets management and automated SAST/DAST testing
• Strengthen OT/IoT security in smart factories through asset discovery, segmentation, anomaly detection and safety enforcement
• Lead red teaming, penetration testing, vulnerability management and post-exploitation remediation
• Oversee business continuity planning, third-party risk management and SASE architecture
• Implement DLP, DSPM, encryption and privacy governance across enterprise and cloud platforms

Required profile

• 5-6 years of hands-on cybersecurity experience, with exposure to enterprise IT and/or industrial (OT/IoT) environments
• Bachelor's degree in Computer Science, Information Security, Engineering or a related field
• Certifications such as CISSP, OSCP, OSCE or equivalent

Required skills

• Red teaming, penetration testing, threat detection and vulnerability assessment
• Cloud security architectures and DevSecOps practices
• OT/IoT security controls