Cyber Security Governance Lead

Job Title

Cyber Governance Lead

Business

Job Purpose

Conduct and co-coordinate cyber security activities regarding governance of ENOC information and cyber security efforts towards protecting the organization information assets and critical infrastructure. conduct and maintain the development of cyber security policies, monitor compliance directly or in coordination with the cyber security assurance team. Manage cyber awareness program activities and and assist in cyber security planning requirements as directed by Cyber Governance Senior Manager

Principal Accountabilities

Strategy/Governance 
coordinate with ENOC technology functions and other departments in order to ensure that cyber-security elements are embedded and taken into account in their strategic and operational plans.
Operational 
participate in developing cyber-policies, procedures and standards that are in line with best practices and industry trends.
Coordinate the communication of cyber security policies and guidelines and ensure compliance.develop cyber security metrics and reporting framework that measures the efficiency and effectiveness of the cyber security program.
Develop and facilitate a metrics and reporting framework to measure the efficiency and effectiveness of cyber security program
Act as the cyber security risk management liaison with IT/OT and other departments.
Coordinate cyber security and risk management projects with personnel from IT/OT departments, business unites, and other internal departments.
Tracks and reports cyber security risk management trends, opportunities and remediation 
Acts as cyber security risk management liaison with IT/OT departments and other internal departments.
Monitor risk mitigation and coordination of policy and controls to ensure that risk owners are taking effective remediation steps.
Contribute and assist in the cyber security risk treatment plan.
Participate in the investigation of any potential unlawful or fraudulent action related to cyber security compliance, such as the intentional release of sensitive information or a related security breach
conduct cyber security compliance control monitoring to ensure cyber compliance risks are managed to the appropriate level of acceptable residual risk.
track compliance with regulatory and other international information and cyber security standards.
Work with procurement, vendor management and legal department to ensure that third-party suppliers' contracts and operating-level agreements meet cyber security requirements
 

Additional Principal Accountabilities

Work with procurement, vendor management and the legal department to ensure that third-party suppliers' contracts and operating-level agreements meet cyber security requirements
Ensure that business processes and practices are not in conflict with cyber security requirements
Assist in the identification, implementation and assessment of the process based security controls
Participate in development, review and acceptance of security plans with the stakeholders
conduct the follow up of deficiencies identified in monitoring reviews, self-assessments, automated assessments, and internal and external audits to ensure that appropriate remediation measures have been taken.
Assist in the identification, implementation and assessment of the process based security controls.
Participate in the establishment and maintenance of cyber security awareness program
Conduct cyber security awareness training and orientation for all employees and other stakeholders
manage awareness campaigns across ENOC from development to delivery, managing allocated budgets and liaising with 3rd parties as appropriate
Work with third-party stakeholders (including business partners, suppliers, service providers and IT product vendors) to ensure that they clearly understand and comply with ENOC's cyber security requirements
Ensure cyber security awareness program meets all industry regulations, standards, and compliance requirements
Manage the design and drafting of awareness materials across ENOC
Create a metrics framework and evaluation performance indicators that can effectively measure the effectiveness of awareness program 
Stakeholder Management 
Build strong relationships and working collaboratively with internal/external stakeholders and customers to achieve objectives.
 

Cyber Information Security Responsibilities

Comply with all applicable information security policies, standards, and procedures.
Classify and protect information assets in accordance with the Data Classification Standard.
Participate in mandatory information security awareness and training programs.
Support information security initiatives and activities within the organization.
Consider information security requirements when managing changes involving information assets.
Report security incidents, vulnerabilities, weaknesses, or non-compliance in accordance with established procedures.
Fulfil role-specific information security responsibilities and contribute to maintaining the effectiveness of the Information Security Management System (ISMS).

Experience

Education
Degree: Bachelor’s degree in Computer Science, Engineering or Business field or equivalent, Diploma with additional relevant experience.
MBA or Master’s degree in computer science, engineering, information security is preferable.
Required professional certifications: Professional certificate such as CISSP, CISM, C-CISO, GSEC.
Experience 
7+ years of Information Technology experience.
4+ years of relevant working experience. 
Working experience in multiple industries (e.g. Oil & Gas, Energy, Utilities, Retail, Government…) is preferable.
Working experience in managing cyber risk programs and assessments.
Working experience in managing information and cyber security awareness programs.
Working experience in working with cyber security policies, standards and guidelines.