Security Manager – 1090931

26 يوليو، 2022

0 6 2 دقائق

Job Description

Role Purpose
Aid in the establishment of a state-of-the-art EWF Information security practice for IT/OT domains for Energy, Water and Food sectors within the client.
KEY ACCOUNTABILITIES & ACTIVITIES
The successful candidate will:
. Apply knowledge in developing and implementing security solutions for ICS, cloud environments, and IoT.
. Aid EWF in complying with clients's Cybersecurity Authority rules and regulations.
. Provide support for the establishment of sector-specific IT/OT cybersecurity programs.
. Translate client's cybersecurity policies into sector-specific standards, procedures, and best practices.
. Convert EWF cybersecurity strategy into actionable activities, projects, etc.
. Assist in developing a security model for Energy and Water Market Design studies.
. Plan, lead and execute IT/OT cybersecurity projects.
. Play a leading role in designing and delivering a Security Operations Center based on client's vision.
. Act as a liaison for data privacy engagements with the Data Privacy Office and build the necessary administrative and technological capabilities into EWF assets to meet data privacy requirements.
. Evaluate and implement technology-specific cybersecurity solutions
BACKGROUND, SKILLS & QUALIFICATIONS
Experience
. 8+ years of professional experience working on Cyber Security in the following cyber security domains:
. Cloud Security.
. OT/ICS security architecture.
. Risk assessment.
. Threat hunting.
. GRC implementation.
. Incident response.
. Data leakage.
. IT/OT security logging/monitoring.
. Industrial IoT (IIoT) security such as MQTT, OPC UA, oneM2M, etc.
. API/Middleware/SOA, etc
. Familiarity with frameworks such as IEC62443, NIST-CSF and ISO27001.
. Familiarity with data privacy laws in the Kingdom of Saudi Arabia, GDPR and their implications on governance, architectures, and solutions.
. Has demonstrated experience in leading and delivering IT/OT projects.
. Extensive knowledge on cybersecurity solutions, capabilities, limitations, and applicability to various environments within the EWF value chain.
Skills:
. Excellent analytical, planning, organizational and technical skills.
. Adaptability and willingness to learn new skills, technologies, and frameworks.
. Demonstrated ability to breakdown and communicate complex technical problems/solutions to various stakeholders verbally and in writing.
. Excellent written and verbal communication skills.
. Flexibility to work in a relatively unstructured environment of a start-up, both individually and as part of a team.
. Strong inter-personal and communication skills.
Qualifications:
. Bachelor's degree in Computer Science or related field.
. Master's degree in cybersecurity, or related field is a plus.
. Holds security certifications in the IT and/or OT space such as CISSP, GICSP or equivalent.
. Knowledge of Saudi Arabia's NCA, NDMO and HCIS requirements and their implementation.
. Up to date on current cybersecurity trends, threat landscape and security solutions