Introduction
Cartrack, a world-leading smart mobility Software-as-a-Service tech company operating across 27 countries, is looking for a Head of Cyber Security to be responsible for defining, leading, and executing the organization’s global cybersecurity strategy. You will be responsible for safeguarding infrastructure, applications, networks, data, and business-critical platforms across a large-scale SaaS environment. This role requires a balance of technical depth, strategic vision, leadership maturity, and security governance expertise.
Duties & Responsibilities
Strategic Leadership & Governance:
- Develop, own, and drive the organization’s Cyber Security strategy, roadmap, policies, and standards.
- Establish and mature the security operating model, including governance frameworks, risk management processes, and compliance programs.
- Ensure alignment between security initiatives, business objectives, technology teams, and executive stakeholders.
- Present security posture, risks, and initiatives to senior leadership and board-level forums.
- Oversee the effectiveness of all security platforms (e.g., SIEM, PAM, EDR/XDR, vulnerability scanners, application security tools).
- Define and review security architecture for infrastructure, networks, cloud, and applications to ensure a secure-by-design approach.
- Lead the design, implementation, and continuous improvement of security systems, tooling, and automation, including upgrades and modernization initiatives.
- Perform or guide technical security reviews of new systems, products, architectures, and third-party integrations.
- Lead enterprise-wide monitoring, detection, response, and threat-hunting capabilities.
- Manage security incidents end-to-end, including root cause analysis, remediation, and post-incident reporting.
- Oversee simulations of breach and recovery scenarios (e.g., red-team exercises, tabletop simulations).
- Ensure compliance with local, national, and international regulations, including privacy and data protection requirements.
- Conduct continuous risk assessments, monitor control effectiveness, and implement improvements.
- Lead security vendor evaluations, POCs, and procurement processes.
- Work closely with engineering, infrastructure, cloud, product, and data teams to embed security best practices.
- Educate and empower colleagues across the business on security awareness, secure engineering, and safe data practices.
- Challenge existing practices and introduce improvements, automation, and modern frameworks across technology teams.
Desired Experience & Qualification
- Bachelor’s degree in Computer Science, Engineering, or equivalent industry experience.
- Relevant security certifications (e.g., CISSP, CISM, CEH, OSCP, CompTIA Security ).
- Ability to operate under pressure, manage multiple priorities, and lead teams in a fast-paced environment.
- Eligibility for or possession of security clearance is an advantage.
- 8-12 years’ experience in cybersecurity, infrastructure security, or security engineering roles, with proven leadership responsibilities.
- Deep technical knowledge across operating system security, database security, networking, and cloud/ hybrid environments.
- Strong understanding of cybersecurity frameworks, methodologies, and secure architecture principles.
- Significant experience with SIEM, network monitoring, endpoint protection, vulnerability management, and IAM/PAM systems.
- Solid grasp of low-level networking and the TCP/IP stack (advantageous).
- Experience in SaaS or large-scale, high-availability environments is highly beneficial.