Cyber Security Governance Lead

ENOC LUBRICANTS AND GREASE MANUFACTURING PLANT LLC; Dubai; On-site; AED 240,000 - 420,000; Full time

Job summary

ENOC LUBRICANTS AND GREASE MANUFACTURING PLANT LLC is seeking a seasoned cyber security leader to drive governance, policy development and risk management for ENOC information assets and critical infrastructure in the UAE. The role coordinates cyber security policies, metrics, awareness programs and regulatory compliance across IT/OT and business units.

The successful candidate will serve as a liaison with procurement, legal and other departments to ensure robust cyber security controls and ISMS

Qualifications

• Minimum 7 years of IT/cyber security experience with governance focus.
• Experience in developing and enforcing security policies, standards and guidelines.
• Strong knowledge of ISMS, risk management and regulatory compliance.

Responsibilities

• Lead cyber security governance, policy development and alignment with best practices.
• Coordinate cyber security risk management across IT, OT and business units.
• Develop metrics and reporting frameworks to measure program effectiveness.
• Act as liaison with procurement, legal and other departments to ensure supplier security requirements.
• Coordinate cyber security awareness programs and training for employees and stakeholders.
• Monitor compliance with information security standards and support audits.

Skills

Cyber security

Risk management

ISMS

Security policies

Education

Bachelor's degree in Computer Science / Engineering / Business

MBA or Master’s degree (preferable)

Job description

Job Purpose

Conduct and co-coordinate cyber security activities regarding governance of ENOC information and cyber security efforts towards protecting the organization information assets and critical infrastructure conduct and maintain the development of cyber security policies monitor compliance directly or in coordination with the cyber security assurance team Manage cyber awareness program activities and and assist in cyber security planning requirements as directed by Cyber Governance Senior ManagerPrincipal AccountabilitiesStrategy Governance nbsp coordinate with ENOC technology functions and other departments in order to ensure that cyber-security elements are embedded and taken into account in their strategic and operational plans Operational nbsp participate in developing cyber-policies procedures and standards that are in line with best practices and industry trends Coordinate the communication of cyber security policies and guidelines and ensure compliance develop cyber security metrics and reporting framework that measures the efficiency and effectiveness of the cyber security program Develop and facilitate a metrics and reporting framework to measure the efficiency and effectiveness of cyber security programAct as the cyber security risk management liaison with IT OT and other departments Coordinate cyber security and risk management projects with personnel from IT OT departments business unites and other internal departments Tracks and reports cyber security risk management trends opportunities and remediation nbsp Acts as cyber security risk management liaison with IT OT departments and other internal departments Monitor risk mitigation and coordination of policy and controls to ensure that risk owners are taking effective remediation steps Contribute and assist in the cyber security risk treatment plan Participate in the investigation of any potential unlawful or fraudulent action related to cyber security compliance such as the intentional release of sensitive information or a related security breachconduct cyber security compliance control monitoring to ensure cyber compliance risks are managed to the appropriate level of acceptable residual risk track compliance with regulatory and other international information and cyber security standards Work with procurement vendor management and legal department to ensure that third-party suppliers contracts and operating-level agreements meet cyber security requirements nbsp Additional Principal AccountabilitiesWork with procurement vendor management and the legal department to ensure that third-party suppliers contracts and operating-level agreements meet cyber security requirementsEnsure that business processes and practices are not in conflict with cyber security requirementsAssist in the identification implementation and assessment of the process based security controlsParticipate in development review and acceptance of security plans with the stakeholdersconduct the follow up of deficiencies identified in monitoring reviews self-assessments automated assessments and internal and external audits to ensure that appropriate remediation measures have been taken Assist in the identification implementation and assessment of the process based security controls Participate in the establishment and maintenance of cyber security awareness programConduct cyber security awareness training and orientation for all employees and other stakeholdersmanage awareness campaigns across ENOC from development to delivery managing allocated budgets and liaising with 3rd parties as appropriateWork with third-party stakeholders including business partners suppliers service providers and IT product vendors to ensure that they clearly understand and comply with ENOC s cyber security requirementsEnsure cyber security awareness program meets all industry regulations standards and compliance requirementsManage the design and drafting of awareness materials across ENOCCreate a metrics framework and evaluation performance indicators that can effectively measure the effectiveness of awareness program nbsp Stakeholder Management nbsp Build strong relationships and working collaboratively with internal external stakeholders and customers to achieve objectives nbsp Cyber Information Security ResponsibilitiesComply with all applicable information security policies standards and procedures Classify and protect information assets in accordance with the Data Classification Standard Participate in mandatory information security awareness and training programs Support information security initiatives and activities within the organization Consider information security requirements when managing changes involving information assets Report security incidents vulnerabilities weaknesses or non-compliance in accordance with established procedures Fulfil role-specific information security responsibilities and contribute to maintaining the effectiveness of the Information Security Management System ISMS ExperienceEducationDegree Bachelor s degree in Computer Science Engineering or Business field or equivalent Diploma with additional relevant experience MBA or Master s degree in computer science engineering information security is preferable Required professional certifications Professional certificate such as CISSP CISM C-CISO GSEC Experience nbsp 7 years of Information Technology experience 4 years of relevant working experience nbsp Working experience in multiple industries e g Oil amp Gas Energy Utilities Retail Government is preferable Working experience in managing cyber risk programs and assessments Working experience in managing information and cyber security awareness programs Working experience in working with cyber security policies standards and guidelines nbsp