Cyber Security Governance Lead

Emirates National Oil Company Limited (ENOC) L.L.C.; Dubai; On-site; AED 360,000 - 480,000; Full time

Job summary

ENOC is seeking a Cyber Governance Lead in Dubai to oversee governance of cyber security policies, monitor compliance, and co-coordinate activities to protect ENOC information assets and critical infrastructure. The role involves developing cyber security policies, coordinating with IT/OT and other departments, and leading awareness initiatives.

The candidate will manage cyber risk programs, metrics, and reporting, ensuring alignment with regulatory and industry standards, while driving

Qualifications

• Bachelor’s degree in Computer Science, Engineering or Business field or equivalent, Diploma with additional relevant experience.
• MBA or Master’s degree in computer science, engineering, information security is preferable.
• Required professional certifications such as CISSP, CISM, C-CISO, GSEC.

Responsibilities

• Coordinate with ENOC technology functions and other departments to embed cyber-security in strategic and operational plans.
• Develop cyber-policies, procedures and standards in line with best practices and industry trends.
• Communicate cyber security policies and guidelines; develop metrics and reporting framework.
• Act as the cyber security risk management liaison with IT/OT and other departments.
• Coordinate cyber security and risk management projects across IT/OT, business units and internal departments.
• Track and report cyber security risk management trends, opportunities and remediation.
• Monitor risk mitigation and policy/controls to ensure remediation steps are effective.
• Assist in cyber security risk treatment planning and awareness programs.
• Participate in investigation of cyber security compliance incidents or breaches.
• Conduct cyber security compliance monitoring to manage risks to an acceptable residual level.
• Track compliance with regulatory and international information and cyber security standards.
• Work with procurement, vendor management and legal to ensure third-party contracts meet cyber requirements.
• Develop, review and acceptance of security plans with stakeholders.
• Follow-up deficiencies from monitoring, audits, and assessments to ensure remediation.
• Establish and maintain cyber security awareness program; deliver awareness training for all employees.
• Manage awareness campaigns across ENOC, including budgeting and third-party coordination.
• Collaborate with external stakeholders to ensure ENOC's cyber security requirements are understood and met.
• Ensure awareness program meets industry regulations and standards; draft awareness materials.
• Create a metrics framework and performance indicators to measure awareness effectiveness.
• Build strong relationships with internal/external stakeholders and customers.

Education

Bachelor's degree in CS/Engineering/Business

MBA or Master’s in CS/Engineering/Info Security

Diploma with relevant experience

Job description

Select how often (in days) to receive an alert:

Cyber Security Governance Lead

Location: DUBAI, AE

Company: ENOC

Job Title

Cyber Governance Lead

Job Purpose

Conduct and co-coordinate cyber security activities regarding governance of ENOC information and cyber security efforts towards protecting the organization information assets and critical infrastructure. conduct and maintain the development of cyber security policies, monitor compliance directly or in coordination with the cyber security assurance team. Manage cyber awareness program activities and and assist in cyber security planning requirements as directed by Cyber Governance Senior Manager

Principal Accountabilities

• Strategy/Governance coordinate with ENOC technology functions and other departments in order to ensure that cyber-security elements are embedded and taken into account in their strategic and operational plans.
• Operational participate in developing cyber-policies, procedures and standards that are in line with best practices and industry trends.
• Coordinate the communication of cyber security policies and guidelines and ensure compliance.develop cyber security metrics and reporting framework that measures the efficiency and effectiveness of the cyber security program.
• Develop and facilitate a metrics and reporting framework to measure the efficiency and effectiveness of cyber security program
• Act as the cyber security risk management liaison with IT/OT and other departments.
• Coordinate cyber security and risk management projects with personnel from IT/OT departments, business unites, and other internal departments.
• Tracks and reports cyber security risk management trends, opportunities and remediation
• Acts as cyber security risk management liaison with IT/OT departments and other internal departments.
• Monitor risk mitigation and coordination of policy and controls to ensure that risk owners are taking effective remediation steps.
• Contribute and assist in the cyber security risk treatment plan.
• Participate in the investigation of any potential unlawful or fraudulent action related to cyber security compliance, such as the intentional release of sensitive information or a related security breach
• conduct cyber security compliance control monitoring to ensure cyber compliance risks are managed to the appropriate level of acceptable residual risk.
• track compliance with regulatory and other international information and cyber security standards.
• Work with procurement, vendor management and legal department to ensure that third-party suppliers' contracts and operating-level agreements meet cyber security requirements

Additional Principal Accountabilities

• Work with procurement, vendor management and the legal department to ensure that third-party suppliers' contracts and operating-level agreements meet cyber security requirements
• Ensure that business processes and practices are not in conflict with cyber security requirements
• Assist in the identification, implementation and assessment of the process based security controls
• Participate in development, review and acceptance of security plans with the stakeholders
• conduct the follow up of deficiencies identified in monitoring reviews, self-assessments, automated assessments, and internal and external audits to ensure that appropriate remediation measures have been taken.
• Assist in the identification, implementation and assessment of the process based security controls.
• Participate in the establishment and maintenance of cyber security awareness program
• Conduct cyber security awareness training and orientation for all employees and other stakeholders
• manage awareness campaigns across ENOC from development to delivery, managing allocated budgets and liaising with 3rd parties as appropriate
• Work with third-party stakeholders (including business partners, suppliers, service providers and IT product vendors) to ensure that they clearly understand and comply with ENOC's cyber security requirements
• Ensure cyber security awareness program meets all industry regulations, standards, and compliance requirements
• Manage the design and drafting of awareness materials across ENOC
• Create a metrics framework and evaluation performance indicators that can effectively measure the effectiveness of awareness program
• Stakeholder Management
• Build strong relationships and working collaboratively with internal/external stakeholders and customers to achieve objectives.

Cyber Information Security Responsibilities

• Comply with all applicable information security policies, standards, and procedures.
• Classify and protect information assets in accordance with the Data Classification Standard.
• Participate in mandatory information security awareness and training programs.
• Support information security initiatives and activities within the organization.
• Consider information security requirements when managing changes involving information assets.
• Report security incidents, vulnerabilities, weaknesses, or non-compliance in accordance with established procedures.
• Fulfil role-specific information security responsibilities and contribute to maintaining the effectiveness of the Information Security Management System (ISMS).

Experience

• Education
• Degree: Bachelor’s degree in Computer Science, Engineering or Business field or equivalent, Diploma with additional relevant experience.
• MBA or Master’s degree in computer science, engineering, information security is preferable.
• Required professional certifications: Professional certificate such as CISSP, CISM, C-CISO, GSEC.
• Experience
• 7+ years of Information Technology experience.
• 4+ years of relevant working experience.
• Working experience in multiple industries (e.g. Oil & Gas, Energy, Utilities, Retail, Government…) is preferable.
• Working experience in managing cyber risk programs and assessments.
• Working experience in managing information and cyber security awareness programs.
• Working experience in working with cyber security policies, standards and guidelines.