Cyber Security Governance Lead

ENOC; Dubai; On-site; AED 300,000 - 540,000; Full time

Job summary

ENOC is seeking an experienced Cyber Security professional to lead governance, risk management, and awareness initiatives across the organization. The role focuses on developing cyber security policies, coordinating risk assessments, and ensuring compliance with standards across multiple departments and external partners.

The candidate will manage cyber security programs, metrics, and reporting, while collaborating with IT/OT, procurement, legal, and vendors to uphold ENOC's information security

Qualifications

• 7+ years of Information Technology experience.
• 4+ years of relevant working experience.
• Experience across multiple industries (Oil & Gas, Energy, Utilities, Retail, Government) preferred.
• Experience managing cyber risk programs and assessments.
• Experience managing information and cyber security awareness programs.
• Experience with cyber security policies, standards and guidelines.
• Professional certifications such as CISSP, CISM, C-CISO, GSEC.

Responsibilities

• Coordinate governance and strategy for cyber security with ENOC technology functions and departments.
• Develop cyber policies, procedures and standards aligned with best practices.
• Coordinate communication of policies and guidelines and ensure compliance.
• Develop metrics and reporting framework for cyber security program performance.
• Act as liaison for cyber security risk management with IT/OT and other departments.
• Coordinate cyber security projects with IT/OT, business units and internal teams.
• Monitor risk management trends and remediation.
• Ensure third-party contracts meet cyber security requirements.
• Develop and maintain security awareness program and training for all employees and stakeholders.
• Manage awareness campaigns and liaise with 3rd parties as appropriate.
• Collaborate with procurement, vendor management, and legal to meet cyber security requirements.
• Assist in identifying and implementing process-based security controls.
• Develop and review security plans with stakeholders.

Skills

Cybersecurity governance

Cyber risk management

Cybersecurity awareness

Policy development

Education

Bachelor’s degree in CS/Engineering/Business

MBA or Master’s degree preferable

Job description

Job Purpose

Conduct and co-coordinate cyber security activities regarding governance of ENOC information and cyber security efforts towards protecting the organization information assets and critical infrastructure. conduct and maintain the development of cyber security policies, monitor compliance directly or in coordination with the cyber security assurance team. Manage cyber awareness program activities and and assist in cyber security planning requirements as directed by Cyber Governance Senior Manager

Principal Accountabilities

Strategy/Governance

coordinate with ENOC technology functions and other departments in order to ensure that cyber-security elements are embedded and taken into account in their strategic and operational plans.

Operational

participate in developing cyber-policies, procedures and standards that are in line with best practices and industry trends.

Coordinate the communication of cyber security policies and guidelines and ensure compliance.

Develop cyber security metrics and reporting framework that measures the efficiency and effectiveness of the cyber security program.

Develop and facilitate a metrics and reporting framework to measure the efficiency and effectiveness of cyber security program

Act as the cyber security risk management liaison with IT/OT and other departments.

Coordinate cyber security and risk management projects with personnel from IT/OT departments, business unites, and other internal departments.

Tracks and reports cyber security risk management trends, opportunities and remediation

Acts as cyber security risk management liaison with IT/OT departments and other internal departments.

Monitor risk mitigation and coordination of policy and controls to ensure that risk owners are taking effective remediation steps.

Contribute and assist in the cyber security risk treatment plan.

Participate in the investigation of any potential unlawful or fraudulent action related to cyber security compliance, such as the intentional release of sensitive information or a related security breach

conduct cyber security compliance control monitoring to ensure cyber compliance risks are managed to the appropriate level of acceptable residual risk.

track compliance with regulatory and other international information and cyber security standards.

Work with procurement, vendor management and legal department to ensure that third-party suppliers' contracts and operating-level agreements meet cyber security requirements

Additional Principal Accountabilities

Work with procurement, vendor management and the legal department to ensure that third-party suppliers' contracts and operating-level agreements meet cyber security requirements

Ensure that business processes and practices are not in conflict with cyber security requirements

Assist in the identification, implementation and assessment of the process based security controls

Participate in development, review and acceptance of security plans with the stakeholders

conduct the follow up of deficiencies identified in monitoring reviews, self-assessments, automated assessments, and internal and external audits to ensure that appropriate remediation measures have been taken.

Assist in the identification, implementation and assessment of the process based security controls.

Participate in the establishment and maintenance of cyber security awareness program

Conduct cyber security awareness training and orientation for all employees and other stakeholders

manage awareness campaigns across ENOC from development to delivery, managing allocated budgets and liaising with 3rd parties as appropriate

Work with third-party stakeholders (including business partners, suppliers, service providers and IT product vendors) to ensure that they clearly understand and comply with ENOC's cyber security requirements

Ensure cyber security awareness program meets all industry regulations, standards, and compliance requirements

Manage the design and drafting of awareness materials across ENOC

Create a metrics framework and evaluation performance indicators that can effectively measure the effectiveness of awareness program

Stakeholder Management

Build strong relationships and working collaboratively with internal/external stakeholders and customers to achieve objectives.

Cyber Information Security Responsibilities

Comply with all applicable information security policies, standards, and procedures.

Classify and protect information assets in accordance with the Data Classification Standard.

Participate in mandatory information security awareness and training programs.

Support information security initiatives and activities within the organization.

Consider information security requirements when managing changes involving information assets.

Report security incidents, vulnerabilities, weaknesses, or non-compliance in accordance with established procedures.

Fulfil role-specific information security responsibilities and contribute to maintaining the effectiveness of the Information Security Management System (ISMS).

Experience

Education

Degree: Bachelor’s degree in Computer Science, Engineering or Business field or equivalent, Diploma with additional relevant experience.

MBA or Master’s degree in computer science, engineering, information security is preferable.

Required professional certifications

Professional certificate such as CISSP, CISM, C-CISO, GSEC.

Experience

7+ years of Information Technology experience.

4+ years of relevant working experience.

Working experience in multiple industries (e.g. Oil & Gas, Energy, Utilities, Retail, Government…) is preferable.

Working experience in managing cyber risk programs and assessments.

Working experience in managing information and cyber security awareness programs.

Working experience in working with cyber security policies, standards and guidelines.