Oil & Gas

Job Description: Key Result Areas (Key Accountabilities)
1. Responsible to help define and ensure the effectiveness of the Information Security Management Systems.
2. Coordinate the Cyber Security Engineer(s) in their projects and assignment work execution in accordance with the delivery schedule, contractual requirements, and critical path adhering to all policies and procedures.
3. Participate in Information Security related internal and external audits.
4. Define protocols and maturing of 'playbooks' for Operational response to cyber threats and events.
5. Identify and communicate current and emerging security threats and design security architecture elements and controls to mitigate threats as they emerge. Drive the implementation of emerging threat intelligence (IOCs), updated rules, etc.).
6. Work closely with the IT team and the business to ensure that Information Security is considered and involved in project planning and all data is classified according to their confidentialities and criticalities.
7. Report analysis and work with IT team during security incidents. Participate in post-incident reporting and propose enhancement to the systems and IT infrastructure to close the security gaps. Coordinate periodic testing of information security-specific processes, such as incident response plans. Assess and manage security risks related with new projects and existing applications / systems.
8. Track and maintain security risk remediation plans with relevant parties to achieve compliance with security requirements and mitigate identified risks to an acceptable level.
9. Direct the ongoing, proactive risk assessment programme for all new and existing systems and remain familiar with the Company’s goals and business processes so effective controls can be put in place for those areas presenting the greatest Information Security risk.
10. Ensure vulnerabilities are managed by directing periodic vulnerability scans. 11. Develop Information Security Awareness training and education programmes. 12. Peer review and quality control of deliverables produced by the Cyber team – to achieve technical compliancy and successful sign-off.
13. Provide Cyber Security expertise for Industrial Control Systems.
14. Manage supplier relationships and interfaces and advise suppliers on recommended actions relating to active projects.

Educational Qualifications:
▪ Degree in Engineering / Computer Science / Information Security / Information Management Systems or related field. ▪ Certified Information Systems Security Professional (CISSP) preferred.
▪ Information Security and /or Information Technology industry certification (ISO 27001 Lead Implementer or Lead Auditor) preferred.
▪ Prince II or PMP preferred.
▪ CompTIA Network+, Security+, SSCP, CISM, CISA or equivalent certifications held or working towards.

Experience Profile:
▪ 5 - 10+ year’s work experience in Information Security implementation, management, monitoring, and audit.
▪ Proven track-record of understanding security controls and working across the organisation to implement and validate controls.