Cyber Security Engineer

JOB DESCRIPTION

OT / ICS Operations & Security Management

- Support the company's ICS/OT operations, including networks, systems, endpoints, and cybersecurity tools. - Maintain OT system and network monitoring to ensure availability and reliability. - Configure, troubleshoot, and provide day-to-day operational support for cybersecurity solutions within the ICS environment. - Support day-to-day control system operations and troubleshoot issues to ensure reliable plant performance. - Monitor systems for unusual or suspicious activities and respond to cybersecurity incidents, alerts, and threats. - Maintain and enhance security controls for critical systems to meet operational and cybersecurity requirements. - Manage CII system and network backup processes to ensure business continuity and recovery readiness.

Information Security Governance & Compliance

- Manage and maintain the organization's Information Security Management System (ISMS). - Conduct annual reviews and updates of ISMS policies, procedures, and supporting documentation. - Implement and maintain cybersecurity requirements in compliance with CSA, PSO, EMA, CCOP, ISO 27001:2022, and other applicable standards and regulations. - Take ownership of ISMS-related activities and continuous improvement initiatives. - Serve as the key liaison between the organization, customers, auditors, service providers, and internal information security stakeholders.

Risk, Vulnerability & Security Assessment

- Conduct annual cybersecurity risk assessments for Critical Information Infrastructure (CII) systems. - Identify, assess, and mitigate cybersecurity risks to ensure critical systems remain secure and resilient. - Perform vulnerability management and patch management activities for OT/ICS environments. - Plan and execute cybersecurity activities including:

- Vulnerability Assessments (VA) - Penetration Testing (VAPT) - Threat Hunting - Purple Team Exercises - Tabletop Exercises - Security Reviews and Assessments - Review cybersecurity advisories and implement mitigation measures where necessary.

Audit & Regulatory Management

- Support and coordinate internal and external cybersecurity audits. - Plan and execute annual cybersecurity audit programs. - Coordinate CSA audits, vulnerability assessments, compliance reviews, and mandated regulatory audits. - Ensure audit findings are tracked, remediated, and closed within agreed timelines. - Support information security requirements during both internal and external audits.

Security Projects & Technology Improvement

- Review existing technology architecture and identify vulnerabilities, weaknesses, and improvement opportunities. - Plan, implement, and oversee cybersecurity technology upgrades, enhancements, and major system changes. - Develop technical solutions, cost estimations, budgets, and proposals to meet cybersecurity requirements for internal and external projects. - Support the delivery, commissioning, and cybersecurity assurance of new projects and plant systems. - Ensure all new systems meet operational, cybersecurity, and regulatory requirements before deployment.

Vendor & Stakeholder Management

- Work closely with business units, service providers, and external stakeholders to ensure OT cybersecurity requirements are met. - Collaborate with internal IT security personnel and Site Information Security Officers (SITSO) on cybersecurity initiatives. - Evaluate and monitor cybersecurity service performance and Key Performance Indicators (KPIs) of third-party vendors and contractors. - Coordinate cybersecurity activities with the EC&I Department and support departmental objectives.

Training & Awareness

- Develop and deliver cybersecurity awareness programs and training sessions for employees. - Promote cybersecurity best practices across the organization.

Provide guidance and support to users on cybersecurity policies, procedures, and compliance requirements.'

JOB REQUIREMENTS

Qualifications & Experience

- Degree or Diploma in Cybersecurity, Information Technology, Computer Engineering, Electrical & Electronic Engineering, or a related discipline.

BUSINESS SEGMENT

Infrastructure

PLATFORM

Operating Division