Manager, Global Cyber Security

Position is responsible for leading the organization’s global cybersecurity defense architecture and operations program.

The role oversees technical coordination with regional teams to implement global cybersecurity infrastructure,

including incident response, security monitoring, threat detection and response, vulnerability management, system

design reviews, security tooling administration, identity security operations, and third-party security incident

coordination. It also includes analyzing threats and security alerts, managing security technologies and managed

security services, and providing regular status, performance, and service-level reporting to management. The position

partners closely with business and technology stakeholders to strengthen overall security posture and requires a strong

technical background, leadership experience, and the ability to communicate cybersecurity risks and operational

performance clearly to both technical and executive audiences to meet regulatory and compliance requirements, while

supporting business functions and advancing business objectives.

Support global cybersecurity strategy by leading cybersecurity collaboration with YMC IT Center, YMC

Global CSIRT, and regions to improve operational maturity, and align cybersecurity priorities with

business and IT objectives. Lead governance and adoption of AI-enabled cybersecurity capabilities to

strengthen operations, efficiency, compliance, and responsible AI security practices.

2. Lead global Finance cybersecurity operations, including monitoring, threat detection, investigation,

triage, containment, and coordinated regional remediation of events and incidents. Collaborate with

global and regional cybersecurity incident response teams. Oversee MSSP services alignment to

ensure effective response, timely escalation, and maintained incident response procedures across

the global enterprise.

3. Lead and consult on enterprise vulnerability strategy and exposure management across regional

infrastructure, cloud environments, endpoints, applications, and identities. Partner with regional

technology owners to coordinate technology risk mitigation activities, track regional risk reduction

progress, and provide global leadership visibility with clear updates on remediation status and

remaining risk.

4. Own, administer, consult, and advise regions on key cybersecurity technologies, including XDR,

Identity Access Management, email security platforms, vulnerability management tools, data

protection, and related security solutions. Continuously improve regional technology adoption and

roadmap to strengthen cybersecurity capabilities and increase operational efficiency.

5. Lead, mature, and maintain the global cyber security incident response program. Coordinate regional

incident investigations, digital forensics activities, root cause analysis, lessons learned reviews,

tabletop exercises, and cyber crisis response activities.

6. Research, evaluate, design, test, and recommend new or updated cyber security hardware and

software solutions. Assess global and regional system architecture and its impact on the existing

environment, and provide technical expertise to support the administration and effective use of

security tools.

7. Manage the lifecycle of the global cyber security technology roadmap, dependencies, exceptions, outcome validation, and transitions with regions.

8. Develop cybersecurity operational metrics, KPIs, dashboards, and executive reports to measure

global operational performance and support leadership decision-making. Consult, advise, and

contribute to audits, compliance activities, risk assessments, policy development, and continuous

improvement efforts. Support budget planning.

9. Ensures the collaboration of threat intelligence collected and security operation centers (SOC) from

incident engagements to regional operational cybersecurity teams.

10. Other related cybersecurity projects and duties as assigned

Qualifications

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Telecommunications, or equivalent

work experience.

§ Relevant cybersecurity certifications preferred, such as CISSP, CISM, GSEC, or CEH.

§ Knowledge of leading security frameworks and standards, including SANS Top 20 Security Controls, OWASP Top 10,

NIST Cybersecurity Framework, and ISO 27001/27002.

§ Minimum of 5 years of experience with networking, intrusion detection and prevention systems (IDS/IPS), identity

management, endpoint security, cloud access security brokers (CASB), security information and event management

(SIEM), data loss prevention (DLP), and encryption technologies.

§ 5–10 years of experience in cybersecurity risk management and compliance.

§ 5–10 years of experience managing, developing, implementing, and maintaining cybersecurity technologies,

products, and operational processes.

§ Familiarity with Ruby, Python, PHP, PowerShell, SQL, and/or shell scripting.

§ Experience managing relationships with managed security service providers (MSSPs) and operational providers.

§ Experience leading cybersecurity incident investigations and remediation efforts.

§ Experience supporting cloud security technologies and hybrid enterprise environments.

§ Experience with NIST CSF 2.0, MITRE ATT&CK, CIS Controls, ISO 27001, and threat intelligence frameworks.

§ Expert understanding of identity and access management (IAM) concepts, including federation, authentication,

authorization, access controls, access-based attack methods, identity lifecycle management, and access

provisioning.