Job Description

Company
Qatar Petroleum (QP) is a state-owned public corporation established byEmiri Decree No. 10 in 1974. It is responsible for
all phases of the oiland gas industry in the State of Qatar.The principal activities of QP, its subsidiaries and joint ventures
arethe exploration, production, local and international sale of crude oil,natural gas and gas liquids, refined products,
synthetic fuels,petrochemicals, fuel additives, fertilizers, liquefied natural gas(LNG), steel and aluminium.QP's strategy of
conducting hydrocarbon exploration and development isthrough Exploration and Production Sharing Agreements (EPSA)
andDevelopment and Production Sharing Agreements (DPSA) concluded withmajor international oil and gas
companies.The operations and activities of QP and its affiliates are conducted atvarious onshore locations, including Doha,
Dukhan and the Mesaieed andRas Laffan Industrial Cities, as well as offshore areas, including HalulIsland, offshore
production stations, drilling platforms and the NorthField.Thriving on a spirit of enterprise, each of our joint ventures
isunderpinned by transparency, innovation and high standards of qualityand service. At Qatar Petroleum, we are committed
to one thing aboveall: Excellence.
Department
INFORMATION & COMMUNICATION TECHNOLOGY
Primary purpose of job
Ensure the security of Operations Technology (OT) systems through the identification, resolution, prevention and mitigation
of risks, threats and concerns with Industrial Control Systems (ICS) / Supervisory Control and Data Acquisition Systems
(SCADA).
Experience & Skills

• Subject matter expert for OT cybersecurity with a focus on security assurance, cyber-risk management, and

implementation of security programs and solutions.

• Implement cybersecurity program in OT, including data and process protection, vulnerability management, identity

management, among others.

• Conduct security assessments for Industrial Control Systems (ICS)/SCADA.
• Design and support implementation of various OT solutions in industrial environments.
• Assure measurement of cybersecurity metrics and programs for key security, risk, compliance, and service continuity

indicators.

• Technical security expertise in OT to identify security technology solutions and develop security reference architectures

and strategies to achieve business results.

• Solve complex digital and operational security problems in Industrial Control Systems (ICS) used within QP's critical

infrastructure cyber-landscape.

• Validate and verify system security requirements and work within current change management processes supporting

changes in OT environment.

• Technical evaluation and acceptance of new security solutions.

Education

• Bachelor's degree in information security, Computer Science, or Engineering.
• 10 years of Operational Technology experience within utility environment preferably Oil & Gas.
• Experience with Qatar NISS, IEC 62443/ISA 99, NIST SP 800 82, NEI 08 09, ISO 27001, ISO 27005, other industrial

control regulations.

• Demonstrate experience working with automation vendors such as ABB, Siemens, Rockwell, Honeywell, Yokogawa etc.
• Experience securing cross-domain IT/OT communications and pathways.
• Advanced proficiency in industrial communications, PLC, DCS, SIS, HMI or SCADA systems. Experience supporting and

troubleshooting industrial protocols such as OPC, Modbus TCP, HART, Foundation Fieldbus.

• Experience with OT security designs and deployments.
• Relevant security certifications CISSP, CISM, CEH, GICSP.
• Relevant networking certifications CCNA, CCNA Security and CCNP.
• Demonstrated experience working with OT cloud platforms.
• Excellent written and verbal business communication skills.