Job Description

Principal Accountabilities . Ensure compliance and adherence to ORGANIZATION'S 's cyber security controls. . Operate and maintain the network and infrastructure security of solutions within ORGANIZATION'S IT infrastructure. . Execute periodically reviews of infrastructure security solutions configuration to ensure that security controls are effectively and efficiently configured. . Implement security measures in line with ORGANIZATION'S cyber security best practices and requirements. . Review risk assessments and audit observations to implement mitigation actions to address identified gaps and coordinate the identified mitigation actions with all relevant stakeholders. . Participate in IT projects and changes to ensure proper implementation of cyber security requirements. . Agree with the Infrastructure Security Manager on performance management objectives and perform mid-year and year-end performance reviews. . - Implement, manage, review, and continuously improve the security controls for mission critical systems. . - suggest and drive continual improvements to overall security technology and implementing the cutting-edge security technology. . Managing hardware and software security life cycle. . Provide input, and review, policies, processes, and procedure; and recommend changes to enhance overall process and security posture. . Investigate any actual or potential information security incidents and have earliest detection for incidents. . Provide periodic reporting on information security issues . Maintain proper documentation of the network and security environment . Collaborate with GIT staff in the evaluation of new software and hardware systems, particularly as they relate to security. . Manage vendor relationships, support contracts, and ensure defined SLA's are measured and met consistently . Ensure satisfactory department audit with no high risk finding on department. Any finding to be resolved within agreed time (with Audit and Management) . Detailed understating and hands experience with the below technologies: Classification: Public - NGFWs like: Fortinet, PaloAlto and Forcepoint. - IPS: McAfee and TrendMicro. - Proxy servers: Symantec. - Email Gateways: Proofpoint. - WAF: F5 and Imperva. - Remote Access Technologies: F5, Fortinet and Forcepoint. - Network Admission Control: Forescout and ClearPass. - DNS security: InfoBlox. . Additional tasks assigned by the line manager related to security tasks. 3 Requirements Education . Degree: Minimum Bachelor's degree in Computer Science, Engineering or Business field or equivalent. Experience . 7+ years of Information Technology experience. . 5 year of experience in implementing and administrating network and application security solutions
Education . Degree: Bachelor's Degree in Computer Science, Engineering, or Information Systems . Preferred professional certifications: SANS ICS certifications Experience . 7+ years of Information security or Technology experience. . 4+ years in relevant experience. . 2+ years of ICS cyber security experience . Working experience in the Oil and Gas industry. . Working experience in multiple industries (e.g. Energy, Utilities, Retail, Government...) is preferable.