Senior IT Security Specialist

JOB ROLE

• The IT Security Specialist is responsible for ensuring the effectiveness and security of SBM’s IT Security solutions in protecting SBM Offshore’s IT data and services.
• You advise within your area of expertise to ensure that SBM remains at the forefront of technological developments to identify innovative methods to reduce the risk profile of SBM Offshore.
• In the case of a Cybersecurity Incident, work with the security team to mitigate the risk introduced, recover, and investigate the Incident.

RESPONSIBILITIES

1. Support, govern and contribute to a fully integrated and aligned IT Strategy across the SBM organization.
2. Explore areas of improvements within SBM Offshore’s IT Security landscape and propose solutions together with IT Enterprise Architect team.
3. Liaise, work together with, and advise colleagues within different locations and disciplines.
4. Execute the processes and best practices necessary to work according to the direction and Strategy of Group IT.
5. Maintain all security-related documentation and working instruction in the central repository.
6. Ensure quality and accurate information of security assets in the CMDB.
7. Participate and support the Network, Software and System team in solving cross-discipline complex problems that involve security.
8. Participate in Cyber Security activities and ICOSIT audits.
9. Work on four main areas: Implementation, Support, Monitor, Report.
10. Manage security incidents according to Incident Management Process.
11. Begin a forensic investigation in the case of a security incident.

To ensure knowledge sharing and creating awareness amongst the IT community on your respective specialism, you are to:

1. Keep the IT community informed on any new initiatives and decisions taken that might have an impact on day-to-day business.
2. Participate in cybersecurity project implementation when required.
3. Ensure cross-functional alignment to minimize down-time within the overall IT landscape.

To ensure that you understand and manage your stakeholders and their requirements as well as having assigned activities completed successfully, you are to:

1. Understand, plan and deliver assigned tasks with accuracy to meet stakeholders’ needs in a timely manner.
2. Identify areas requiring more detailed instructions and clarify as necessary with stakeholders.
3. Complete tasks in compliance with applicable policies, standards and work procedures.
4. Identify areas for potential cybersecurity risk issues and proactively communicate with stakeholders.
5. Seek clarification or guidance as soon as difficulties arise and recommend alternative solutions.
6. Perform thorough self-check of all solutions prior to release for use by stakeholders.
7. Properly plan work to allow adequate time for stakeholder feedback and adjustments.
8. Network with stakeholders to serve as a source of support in executing projects.
9. Produce consistent/organized instructions in a well-structured format to convey required information to stakeholders.

JOB REQUIREMENTS

1. Solid experience in Cyber Security and Data Protection roles.
2. Familiar with hybrid security solutions, on-premise and cloud environments.
3. Must possess relevant security-related certifications – Cloud Security, Pentest, Vulnerability assessor, CompTIA Security +.
4. Must possess hands-on technical experience in a minimum of 3 areas – AZURE Security, Pentest, Ethical Hacking, forensics, CIS Hardening.
5. Possess the following technical hands-on experience will be added advantage – CES, Carbon Black, Bitdefender.
6. Able to travel overseas when required.
7. Deep understanding of ISA/IEC 62443 and NIST SP 800-82.
8. Knowledge of NIS2 directive.
9. Experience in design and management of Information Security solutions.
10. Advanced English level.
11. Willing to work in a hybrid setting (remote and on-site).