Information & Cybersecurity Advisor - VR/30721

Social network you want to login/join with:

Information & Cybersecurity Advisor - VR/30721, Aberdeen

col-narrow-left

Client:

TMM Recruitment

Location:

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Reference:

2d109fe80bc6

Job Views:

12

Posted:

29.04.2025

Expiry Date:

13.06.2025

col-wide

Job Description:

An opportunity has arisen for an Information & Cybersecurity Advisor based in Aberdeen City Centre. This role is 100% office-based and can be undertaken on a permanent or contract basis. The position involves safeguarding information assets, ensuring compliance, and supporting IT security initiatives.

Overview

This multi-energy company is committed to a sustainable world with a forward-looking vision based on innovation, efficiency, respect, and value creation to drive societal progress. They operate across the entire energy value chain: exploration, production, transformation, development, and marketing of energy that is efficient, sustainable, and competitive for millions of people. With over 80 years of experience, they have established a presence in the oil and gas sector in a sustainable and competitive manner.

The Information & Cybersecurity Advisor is responsible for safeguarding information assets and aligning IT initiatives with business objectives. Acting as a strategic partner, they develop and maintain a robust IT policy framework, manage the IT risk register, and identify emerging compliance requirements. They create insightful KPIs to track IT service value and improvement areas. The advisor collaborates with internal teams to deliver secure, compliant IT solutions and promotes continuous improvement through effective communication and process reviews.

Duties and Responsibilities

• Develop and maintain an integrated, business-aligned IT policy framework, streamlining documentation and removing redundancies as needed.
• Maintain the IT risk register, coordinate risk assessments, and monitor mitigation efforts.
• Identify emerging IT regulatory compliance obligations and ensure awareness within relevant IT teams.
• Create and monitor IT KPIs to evaluate service value and identify improvement opportunities.
• Leverage partnerships with the central team to gain expertise and implement best practices.
• Act as a strategic partner for the UK business, aligning with the company's philosophy and standards.
• Collaborate with the Information & Cybersecurity Lead to ensure compliant IT service delivery, risk mitigation, and high-quality solutions.
• Provide expert advice on delivering secure IT services and projects that meet business needs and compliance standards.
• Identify, assess, and advise on security gaps, and recommend improvements.
• Offer technical expertise on operational security tools (data loss prevention, third-party risk assessments, incident response, etc.).
• Support the implementation of improvements for key security tools and processes (SIEM, Endpoint Security, DLP, etc.).
• Facilitate the identification and assessment of cybersecurity risks.
• Oversee internal testing of IT controls and collaborate with stakeholders to address deficiencies.
• Coordinate external legal and security information delivery.
• Participate in reviews of IT projects to ensure compliance and continuous improvement.
• Understand the threats of cyber attacks in IT and OT environments.

Skills, Qualifications, and Experience

• Extensive experience in IT within the offshore oil and gas industry, preferably in service delivery roles.
• Experience in IT Project Management.
• Experience handling cybersecurity incidents is preferred.
• Strong interpersonal skills and customer-focused experience.
• Experience with cybersecurity projects involving risk analysis, vulnerability assessments, and network security.
• Basic knowledge of ITIL is preferred.
• Ability to work independently, prioritize tasks, and meet deadlines.
• Willingness to travel offshore as required.

Educational Qualifications and Certifications

• Bachelor's or Master's degree in Cybersecurity, Information Technology, Computer Science, or related field.
• Certifications such as CISA and GIAC are preferred.