Cyber Security Governance Manager

ENOC LUBRICANTS AND GREASE MANUFACTURING PLANT LLC

Job Title: Cyber Security Manager

Nationality: Any Nationality

Vacancy: 1 Vacancy

Job Description

Job Purpose: Manage and co-coordinate cyber security activities regarding governance of ENOC information and cyber security efforts towards protecting the organization information assets and critical infrastructure. Manage and maintain the development of cyber security policies, monitor compliance directly or in coordination with the cyber security assurance team. Manage cyber risk management activities and compliance and assist in cyber security planning requirements as directed by Cyber Governance Senior Manager.

Principal Accountabilities

Strategy/Governance

1. Coordinate with ENOC technology functions and other departments to ensure that cyber-security elements are embedded in their strategic and operational plans.

Operational

1. Develop and enforce cyber-policies, procedures and standards that are in line with best practices and industry trends.
2. Manage the communication of cyber security policies and guidelines and ensure compliance.
3. Manage and implement cyber security metrics and reporting framework that measures the efficiency and effectiveness of the cyber security program.
4. Develop and maintain cyber security architecture.
5. Act as the cyber security risk management liaison with IT/OT and other departments.
6. Report to ENOC's management regarding risks, vulnerabilities and other security exposures, including misuse of information assets and noncompliance.
7. Work with business units and other internal departments to facilitate cybersecurity risk analysis and management processes.
8. Benchmark cyber security risk management practices of other organizations.
9. Monitor risk mitigation and coordination of policy and controls.
10. Contribute and assist in the cyber security risk treatment plan.
11. Review external cyber security risk assessments and report on them with actionable recommendations.
12. Provide support and guidance for cyber security legal and regulatory compliance efforts.
13. Participate in the investigation of any potential unlawful or fraudulent action related to cyber security compliance.

Additional Principal Accountabilities

1. Manage relationship with the audit group and remediation plans.
2. Maintain an up-to-date understanding of industry best practices.
3. Manage the establishment and maintenance of a robust security awareness program.
4. Act as cyber security awareness consultants for ENOC business units.

Stakeholder Management

Build strong relationships and work collaboratively with internal/external stakeholders and customers to achieve objectives.

Experience

Education

Degree: Bachelor’s degree in Computer Science, Engineering or Business field or equivalent, Diploma with additional relevant experience. MBA or Master’s degree in computer science, engineering, information security is preferable.

Required professional certifications:

Professional certificate such as CISSP, CISM, C-CISO, GSEC.

Experience

8+ years of Information Technology experience, with 4+ years of relevant working experience. Working experience in multiple industries (e.g. Oil & Gas, Energy, Utilities, Retail, Government) is preferable. Experience in managing cyber risk programs and assessments, and in managing information and cyber security awareness programs.