The opportunity
At EY we have ambitious plans to expand our already market leading Cybersecurity practice. With investment secured, we continue to build our MENA based cyber practice and anticipate continued growth throughout the next five years. We need excellent people, across all grades, to join us and to be part of our exciting growth strategy.
EY is looking for a consulting Director, AEET / OT to join our Cyber Security team in Qatar. While the role will be based in Doha, you will be expected to travel extensively for client related travel to GCC and other parts of MENA region (at least 50-80%).
Your key responsibilities
A large part of your role will be engagement delivery and provide support to executives for business development. We’ll expect you to lead and deliver DPP and cybersecurity engagements with very minimal supervision. We also expect you to support executives in development of proposals, presentations, and other business development activities. You will be responsible for the delivery and quality of the final reports to our clients.
You will have responsibility for;
- You will have at minimum 4 years of experience in Information security and OT / ICS cyber security preferably within the Oil and Gas, Power and Utilities Sectors with subject matter expertise
- Solid Knowledge of the OT and ICS security domain
- Solid experience in ICS / OT products and technologies, hardware and software including, but not limited to Honeywell, GE, Siemens and ABB product families and platforms
- Strong understanding of the complex and sensitive nature of ICS / SCADA environments
- Capable of Evaluating the cyber risks to SCADA, DCS, Smart Grids, DMS, and ECS systems architectures
- Solid understanding of the relevant industries production processes and operational procedures
- Solid knowledge of Industrial networking protocols security such as DNP3, Modbus, Profinet
- In depth endpoint OS and Server OS knowledge
- Strong analytical and problem-solving skills
- Knowledge of OT Capable SIEM, security events logging and monitoring technologies and platforms such as Splunk, Arcsight, QRadar or others
- Experience in deploying of unidirectional firewalls, host-based firewalls, Anti-Malware, HIDS in plant and operational environments
- Awareness of Network monitoring technology platforms such as Fidelis XPS, RSA or others
- Awareness of End point protection tools, hardening techniques, and platforms such as CarbonBlack, Symantec, McAfee or others
- Solid understanding of applicable best practices and security standards such as NERC-CIP, ISA99 (IEC 62443), NIST 800-82, Qatar’s National ICS security standard…etc
- Internationally recognized technical certifications in relevant areas
- Good understanding of plant Process systems, plant safety and plant integrity systems and solutions.
Skills and attributes for success
An existing track record of successful engagement delivery in data protection & privacy and cyber security is expected of all candidates for this role. A Big 4 background or comparable consulting experience is highly advantageous. A broad background across OT and security is expected with specific experience in two or more of the following areas, essential.
- At least 6+ years of sound industry experience in cyber security
- Demonstrated track record with a blue-chip consulting organization and / or a blue-chip organization
- Demonstrated experience in business development and account management
- Cyber awareness programmes, design, and delivery of cyber security awareness programmes to executive level or wider organisation
- Excellent command in written and spoken English
- Experience in managing professional service project teams
- Willingness to travel
Qualifications
- Bachelor’s degree in Electronics Technology, Computer Engineering, Electrical engineering, mechatronics or similar specialization in the electronics, PLC, wireless (radio), networking, and / or ICS technology field
- Relevant professional qualifications such as CISSP, GICSP, ISA99, ISO 27001, CCSA, CCSE, CCSP, EC-Council Ethical Hacker.
What we look for
You’ll need to be highly motivated, a self-starter and a strong communicator with the ability and experience to discuss technical content in business language to board level. You’ll also need to be a team player who is not only looking to enhance their own career but recognises the value in developing others and strengthening the team.
What we offer
We offer a competitive compensation package where you’ll be rewarded based on performance and recognized for the value you bring to our business. Plus, we offer :
- Continuous learning : You’ll develop the mindset and skills to navigate whatever comes next.
- Success as defined by you : We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
- Transformative leadership : We’ll give you the insights, coaching and confidence to be the leader the world needs.
- Diverse and inclusive culture : You’ll be embraced for who you are and empowered to use your voice to help others find theirs.