Cybersecurity Manager – Architecture & Engineering

About the role

ACMobility is seeking a Cybersecurity Manager (Architecture & Engineering) to lead the design, implementation, and continuous improvement of its cybersecurity architecture across cloud, network, endpoint, identity, application, and OT environments. The role blends strategic leadership with hands‑on execution to ensure security aligns with business goals, regulatory requirements, and industry best practices.

Key responsibilities

• Design and maintain enterprise security architecture that is secure‑by‑design for infrastructure, cloud, applications, and networks.
• Define security standards, baselines, and hardening guidelines; drive initiatives such as Zero Trust, IAM, segmentation, firewalls, WAF, and VPNs.
• Secure multi‑cloud and hybrid environments (AWS, Azure, GCP, Alibaba, Huawei) including infrastructure hardening and vulnerability management.
• Oversee security monitoring, SIEM, EDR, logging, incident response, and technical remediation.
• Conduct security risk assessments, architecture reviews, and ensure compliance with NIST, ISO 27001, CIS Benchmarks, and the Data Privacy Act.
• Support vendor risk reviews, audits, and enforce cybersecurity policies.
• Provide technical leadership, mentor teams, and collaborate with IT, engineering, and business units.
• Present security risks and remediation plans to stakeholders and promote security awareness.

Required profile

• Bachelor’s degree in Computer Science, IT, Cybersecurity or related field.
• 7–10 years of experience in cybersecurity, infrastructure or network security; at least 5 years in an enterprise environment.
• Proven experience leading incident‑response engagements.
• Background in regulated industries such as finance, healthcare, or automotive.
• Strong understanding of security operations, incident response, security architecture, DevSecOps, and identity & access management.

Required skills

• AWS, Azure, Google Cloud Platform, Alibaba Cloud, Huawei Cloud
• SIEM, EDR, firewall, Web Application Firewall (WAF), VPN, Zero Trust architecture, IAM, network segmentation
• Vulnerability management, security monitoring, incident response
• NIST Cybersecurity Framework, ISO 27001, CIS Benchmarks