Cyber Security Governance Lead

Job Title Cyber Governance Lead Business Job Purpose Conduct and co-coordinate cyber security activities regarding governance of ENOC information and cyber security efforts towards protecting the organization information assets and critical infrastructure. conduct and maintain the development of cyber security policies, monitor compliance directly or in coordination with the cyber security assurance team.

Manage cyber awareness program activities and and assist in cyber security planning requirements as directed by Cyber Governance Senior Manager Principal Accountabilities Strategy/Governance coordinate with ENOC technology functions and other departments in order to ensure that cyber-security elements are embedded and taken into account in their strategic and operational plans.

Operational participate in developing cyber-policies, procedures and standards that are in line with best practices and industry trends. Coordinate the communication of cyber security policies and guidelines and ensure compliance.develop cyber security metrics and reporting framework that measures the efficiency and effectiveness of the cyber security program.

Develop and facilitate a metrics and reporting framework to measure the efficiency and effectiveness of cyber security program Act as the cyber security risk management liaison with IT/OT and other departments. Coordinate cyber security and risk management projects with personnel from IT/OT departments, business unites, and other internal departments.

Tracks and reports cyber security risk management trends, opportunities and remediation Acts as cyber security risk management liaison with IT/OT departments and other internal departments. Monitor risk mitigation and coordination of policy and controls to ensure that risk owners are taking effective remediation steps.

Contribute and assist in the cyber security risk treatment plan. Participate in the investigation of any potential unlawful or fraudulent action related to cyber security compliance, such as the intentional release of sensitive information or a related security breach conduct cyber security compliance control monitoring to ensure cyber compliance risks are managed to the appropriate level of acceptable residual risk.

track compliance with regulatory and other international information and cyber security standards. Work with procurement, vendor management and legal department to ensure that third-party suppliers' contracts and operating-level agreements meet cyber security requirements Additional Principal Accountabilities Work with procurement, vendor management and the legal department to ensure that third-party suppliers' contracts and operating-level agreements meet cyber security requirements Ensure that business processes and practices are not in conflict with cyber security requirements Assist in the identification, implementation and assessment of the process based security controls Participate in development, review and acceptance of security plans with the stakeholders conduct the follow up of deficiencies identified in monitoring reviews, self-assessments, automated assessments, and internal and external audits to ensure that appropriate remediation measures have been taken.

Assist in the identification, implementation and assessment of the process based security controls. Participate in the establishment and maintenance of cyber security awareness program Conduct cyber security awareness training and orientation for all employees and other stakeholders manage awareness campaigns across ENOC from development to delivery, managing allocated budgets and liaising with 3rd parties as appropriate Work with third-party stakeholders (including business partners, suppliers, service providers and IT product vendors) to ensure that they clearly understand and comply with ENOC's cyber security requirements Ensure cyber security awareness program meets all industry regulations, standards, and compliance requirements Manage the design and drafting of awareness materials across ENOC Create a metrics framework and evaluation performance indicators that can effectively measure the effectiveness of awareness program Stakeholder Management Build strong relationships and working collaboratively with internal/external stakeholders and customers to achieve objectives.

Cyber Information Security Responsibilities Comply with all applicable information security policies, standards, and procedures. Classify and protect information assets in accordance with the Data Classification Standard. Participate in mandatory information security awareness and training programs. Support information security initiatives and activities within the organization.

Consider information security requirements when managing changes involving information assets. Report security incidents, vulnerabilities, weaknesses, or non-compliance in accordance with established procedures. Fulfil role-specific information security responsibilities and contribute to maintaining the effectiveness of the Information Security Management System (ISMS).

Experience Education Degree: Bachelor’s degree in Computer Science, Engineering or Business field or equivalent, Diploma with additional relevant experience. MBA or Master’s degree in computer science, engineering, information security is preferable. Required professional certifications: Professional certificate such as CISSP, CISM, C-CISO, GSEC.

Experience 7+ years of Information Technology experience. 4+ years of relevant working experience. Working experience in multiple industries (e.g. Oil & Gas, Energy, Utilities, Retail, Government…) is preferable. Working experience in managing cyber risk programs and assessments. Working experience in managing information and cyber security awareness programs.

Working experience in working with cyber security policies, standards and guidelines.