Practice Lead - Cyber Security
First seen by Alion on Sep 21, 2026.
Roles & Responsibilities:
- Act as a trusted advisor and thought leader to customer executives, reviewing their cyber security priorities, framing the current and emerging threat landscape, and aligning on the security and compliance challenges specific to their sector.
- Translate business priorities into clear, risk-based and outcome-driven security roadmaps that balance resilience, compliance and cost, and that align customer objectives with the company strategy to grow the cyber security business.
- Quantify cyber risk in business terms (financial exposure, operational impact, regulatory consequence) to help customers prioritise investment and to position company offerings as a strategic enabler rather than a cost.
- Define and own the cyber security solution set and service catalogue across Zero Trust, SOC / managed detection and response (MDR), GRC, identity and access management, cloud and data security, OT / IoT security and cyber resilience.
- Build the AI-security and AI-governance proposition - securing AI adoption, defending against AI-enabled threats, and embedding responsible-AI, privacy and risk controls (e.g. ISO 42001, NIST AI RMF) into customer transformation programmes.
- Define and manage the OEM strategy - selecting and rationalising technology vendors by market demand, capability and margin, managing partner tiers and accreditations, and co-creating differentiated joint offerings and GTM with strategic OEMs.
- Own the marketing and go-to-market (GTM) strategy for the practice in partnership with sales and marketing - shaping value propositions, campaigns, pricing models, thought-leadership content and proposal / bid support.
- Act as the business manager for the practice - owning revenue growth, gross margin, pipeline, forecasting and the practice P&L, with targets aligned to company strategic business objectives.
- Package capabilities with Presales, Delivery and OEM partners into scalable managed services, solution accelerators, reusable assets, reference architectures and GTM-ready offerings for priority sectors (Government, BFSI, Healthcare, Energy & Utilities, Enterprise).
- Build the capability and credibility of the practice - mentoring the team, driving certifications and OEM accreditations, establishing delivery standards and governance models, and representing the company at industry forums and customer briefings.
- Ensure offerings and roadmaps map to GCC regulatory and national cyber requirements (e.g. UAE NESA / SIA, PDPL, Saudi NCA / SAMA, Vision 2030) and to recognised frameworks (NIST CSF, ISO 27001, MITRE ATT&CK).
Technical Skills Required:
- Strong command of the modern threat landscape and security domains - Zero Trust, SOC / MDR, SIEM / SOAR, GRC, IAM, cloud security, data protection, OT / IoT security and cyber resilience frameworks (NIST CSF, ISO 27001, MITRE ATT&CK).
- AI security and governance - understanding of securing AI/ML adoption, AI-enabled threats and responsible-AI controls (ISO 42001, NIST AI RMF), and the ability to incubate AI-driven security use cases.
- Advisory and thought leadership - ability to assess customer priorities, articulate the threat landscape and define risk-based roadmaps that resonate at board level.
- Risk quantification - ability to express cyber risk in financial and business terms (e.g. FAIR-style methods) to drive investment decisions.
- Solution and portfolio definition - ability to convert capabilities into a structured, productized solution set, scalable managed services and industry-specific offerings.
- OEM ecosystem and partner management - ability to define vendor strategy and co-create offerings with hyperscalers, security OEMs and implementation partners.
- Marketing, GTM and commercial acumen - ability to define propositions, pricing and go-to-market plans, build business cases, and own revenue, margin, pipeline and utilization metrics.
Skills
Cyber Security, Practice Management, IT Security, Information Security