🚀 Welcome to Your Next Adventure!

The Cybersecurity Manager is responsible for the day-to-day management and execution of Snoonu's cybersecurity operations, translating the strategy, policies, and priorities set by the Head of Cybersecurity into consistent, well-run security capabilities across security operations, vulnerability management, incident response, application and cloud security oversight, identity security, and governance execution.

The role operates as the operational backbone of the cybersecurity function, managing security engineers, analysts, and specialists on a day-to-day basis, ensuring controls are implemented correctly, risks are tracked and remediated on schedule, and security processes run reliably and efficiently.

Working closely with the Head of Cybersecurity, and in regular contact with Technology, Product, IT, Data, and business stakeholders, the Cybersecurity Manager ensures that security initiatives are delivered on time, that operational risk is visible and managed, and that the team executes against the priorities defined by cybersecurity leadership.

The role combines hands-on technical oversight with team leadership, acting as the primary point of escalation for operational security matters and freeing the Head of Cybersecurity to focus on strategy, governance, and executive-level risk management.

🛠 What You’ll Get Your Hands On:

1. Operational Leadership & Program Execution

Translate the cybersecurity strategy and roadmap set by the Head of Cybersecurity into operational plans, priorities, and day-to-day execution schedules.
Coordinate execution across security operations, vulnerability management, application security, cloud security, and identity security workstreams.
Track progress of security initiatives, projects, and remediation activities, and escalate delays, resourcing gaps, or emerging risks to the Head of Cybersecurity.
Ensure security processes, runbooks, and procedures are documented, current, and consistently followed by the team.
Support planning and reporting on cybersecurity capacity, workload, and resourcing needs.

2. Security Operations & Incident Response

Manage day-to-day security monitoring and detection activities, ensuring alerts are triaged, investigated, and resolved within agreed timelines.
Act as the operational incident commander for security incidents, coordinating containment, investigation, and remediation, and escalating significant or high-severity incidents to the Head of Cybersecurity promptly.
Ensure incident documentation, timelines, and lessons-learned reports are completed for all incidents.
Coordinate and participate in incident-response tabletop exercises and technical simulations.

3. Vulnerability & Exposure Management

Manage the day-to-day vulnerability management program across applications, infrastructure, cloud, and endpoints.
Ensure vulnerabilities are triaged, prioritized, assigned, and tracked to remediation against agreed SLAs.
Coordinate with engineering, infrastructure, and platform teams to drive timely remediation of critical and high-risk findings.
Monitor overdue items, recurring weaknesses, and exceptions, and escalate material or stalled risks to the Head of Cybersecurity.
Support coordination of penetration tests, scans, and security assessments, and track resulting findings to closure.

4. Application, Cloud & DevSecOps Security Oversight

Oversee day-to-day implementation of application security and DevSecOps practices, including code scanning, dependency checks, and secure release gates.
Monitor cloud security posture and coordinate remediation of misconfigurations, excessive permissions, and exposed assets with infrastructure and platform teams.
Support engineering and product teams with practical security guidance during design and development, escalating architecture-level or higher-risk decisions to the Head of Cybersecurity.
Track adoption and effectiveness of security tooling embedded in CI/CD pipelines and development workflows

5. Identity, Access & Data Security

Oversee operational execution of access reviews, joiner/mover/leaver processes, and privileged-access controls.
Monitor for dormant accounts, excessive privileges, and access-control weaknesses, and drive remediation with system and application owners.
Support implementation of data-security controls, including access control, encryption, and data-loss-prevention monitoring.
Support investigation of suspected data-exposure or unauthorized-access incidents.

6. Governance, Compliance & Third-Party Security Execution

Support execution of the security governance framework, ensuring policies, standards, and procedures defined by the Head of Cybersecurity are implemented and followed operationally.
Coordinate evidence collection, audits, and assessments related to ISO/IEC 27001, PCI DSS, and other applicable frameworks.
Track findings from audits and assessments through to remediation, and maintain accurate compliance records.
Coordinate day-to-day third-party security assessments and monitor remediation of vendor-related risks.

7. Security Awareness & Reporting

Coordinate delivery of security awareness training, phishing simulations, and role-specific enablement programs.
Track behavioral metrics and awareness-program effectiveness, and report trends to the Head of Cybersecurity.
Prepare regular operational reporting on security metrics, KPIs, incidents, vulnerabilities, and remediation status for the Head of Cybersecurity and relevant stakeholders.

8. Team Leadership & Development

Directly manage and coach a team of security analysts, engineers, and specialists across security operations, vulnerability management, and related functions.
Set clear day-to-day expectations, priorities, and performance objectives for the team, aligned with direction from the Head of Cybersecurity.
Conduct performance reviews, identify development needs, and support career growth for team members.
Support hiring, onboarding, and knowledge continuity within the team.
Foster a culture of ownership, technical excellence, and collaboration within the operational security team.

🧙‍♂️ The Magic You Bring

Bachelor's / Master’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or a related discipline, or equivalent relevant professional experience.
4-7 years of experience in the cybersecurity field, including prior experience leading or coordinating a team or workstream.
Hands-on experience across several security domains such as security operations, vulnerability management, incident response, application security, cloud security, or identity and access management.
Practical experience managing security tools, processes, and day-to-day operations in a technology-driven organization.
Working knowledge of cloud environments, modern software-development practices, CI/CD, and enterprise application architectures.
Experience supporting security governance, audits, or compliance activities.
Strong organizational, coordination, and problem-solving skills, with the ability to manage multiple priorities under time pressure.
Good communication skills, with the ability to work effectively with technical teams and non-technical stakeholders.

Technical & Functional Competencies

Security operations and incident response management.
Vulnerability and exposure management.
Application, cloud, and DevSecOps security oversight.
Identity and privileged-access security.
Data security and data-loss prevention.
Security governance, audit, and compliance support (ISO 27001, PCI DSS).
Third-party security assessment coordination.
Security awareness program management.
Security metrics, reporting, and KPI tracking.
Team leadership and operational management.

✨ Bonus Points if You Have:

Experience in a high-growth technology, e-commerce, marketplace, fintech, logistics, payments, or super-app environment.
Experience with AWS, GCP, Kubernetes, CI/CD environments, and modern application architectures.
Experience supporting ISO/IEC 27001, PCI DSS, or similar assurance and compliance programs.
Experience with security automation, SOAR platforms, or security tool integration.
Relevant professional certifications such as CISSP, CISM, CCSP, GIAC certifications, or equivalent credentials.

Inside Snoonu’s Universe

Snoonu is Qatar’s homegrown Super App, reinventing daily life with blazing-fast delivery, shopping, and more – all in one place. Powered by tech, driven by a global team, and obsessed with making life easier.

The Dream We’re Chasing

To be the first Qatari Ultra App that propels the region and its community through innovation and technology. We have global ambitions where what we do surpasses norms and limitations every time.

The Quest We’re On

To radically transform how people live by leveraging technology to connect them with endless possibilities.

Our Everyday Superpowers

Be Customer Obsessed: “Focus on the customer and all else will follow.”

Act with Integrity: “We are honest, ethical, and trustworthy in everything we do.”

Be Curious and Creative: “We constantly innovate and create solutions to bring a lasting positive impact.”

Lead by Example and Take Ownership: “Be the change you want to see and take ownership.”

Work Smart and Deliver Results: “You can do more by doing less, better, and faster.”

It's All About People: “Be a team player; together we are stronger.”

Real Builders Ship: “We turn ideas into products, plans into action, and challenges into opportunities.”

Perks & Worklife Magic At Snoonu

🌐 Global Vibes – Collaborate with a worldwide crew.

🧠 Brain Boosters – Learning budgets, access to courses, and tools for your growth.

🚒 Builder’s Playground – Own your tasks, own your path! We’re big on autonomy.

🏝️ Flexible Time Off – We take recharging seriously. Generous leave and wellness policies.

🛠️ Agile Everything – Scrum isn’t a buzzword here. It’s how we roll, from product to ops.

Great Place to Work® Certified

We’re certified as a Great Place to Work®, a recognition that celebrates a culture we’ve built together where people come first, always. This certification reflects our commitment to creating a workplace where everyone feels valued, empowered, and inspired to do their best work.

Certified for Excellence

Our ISO 9001:2015 and ISO 45001:2018 certifications demonstrate our dedication to world-class quality and a safe, supportive workplace, reinforcing our promise to deliver exceptional service while prioritizing the wellbeing of our people.

Beyond the Code: Giving Back Matters

We don’t just build apps. We’re committed to doing business sustainably and giving back to the community that fuels us. From eco-conscious practices to CSR projects, we’re always finding ways to do better—and we invite you to be a part of that mission.

Diversity Isn’t Just a Buzzword

At Snoonu, fairness and inclusion are the foundation of everything we do. We’re proud to be an equal opportunity workplace that welcomes people from every walk of life. Be bold. Be you. Thrive here.

Let’s Build the Future Together

Apply now to join a team where your contributions spark a change and your voice is heard. Let’s make some magic together.

Stay in the loop—connect with us on LinkedIn!

Cybersecurity Manager