Cybersecurity Manager

About the role

EVA Pharma is seeking a Cybersecurity Manager to own and advance its security posture. You will lead strategy, operations, and technical execution, ensuring the protection of critical data and systems across on‑premise and multi‑cloud environments.

Key responsibilities

• Define and drive security strategy, roadmap, team structure and budget.
• Lead SOC operations and the full incident‑response lifecycle, including detection, threat intelligence and security orchestration.
• Direct offensive security activities such as vulnerability management and penetration testing.
• Design and enforce secure architecture for identity, access, endpoints and networks.
• Integrate security into the software development lifecycle through threat modelling and DevSecOps.
• Build and maintain a GRC program aligned with ISO 27001, GDPR and local data‑protection laws, and manage internal and external audits.
• Develop business continuity and disaster‑recovery capabilities.

Required profile

• Bachelor’s degree in Computer Science or related field (master’s a plus).
• 8+ years in information/cyber security with at least 3 years leading teams and budgets.
• Hands‑on experience running SOCs, SIEM/SOAR platforms, threat intelligence and incident response.
• Proven track record implementing ISO 27001, GDPR and BCP/DR programs.
• Extensive experience securing on‑premise and cloud environments (Azure, GCP, AWS, OCI).
• Strong background in secure application development, threat modelling and DevSecOps.
• Relevant certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor.
• Financial and stakeholder management skills, with the ability to promote security awareness.

Required skills

• SOC operations
• SIEM and SOAR tools
• Threat intelligence
• Incident response
• Vulnerability management
• Penetration testing
• ISO 27001 implementation
• GDPR compliance
• Business continuity & disaster recovery
• Cloud security (Azure, GCP, AWS, OCI)
• IAM, MFA, patch management, least‑privilege access
• Device and physical security controls
• Threat modelling
• DevSecOps practices
• CISSP, CISM, ISO 27001 Lead Implementer/Auditor certifications