Cyber Security Governance Lead

About the role

ENOC is looking for a Cyber Security Governance Lead in Dubai. The role coordinates cyber security activities and maintains the development of cyber security policies, monitors compliance and manages the cyber awareness program, supporting the protection of the organization's information assets and critical infrastructure.

Key responsibilities

• Coordinate with technology functions and other departments so cyber security is embedded in their strategic and operational plans
• Help develop cyber policies, procedures and standards, and communicate them while ensuring compliance
• Develop and run a metrics and reporting framework to measure the effectiveness of the cyber security program
• Act as cyber security risk management liaison with IT/OT and other departments, track risk trends and remediation, and support the risk treatment plan
• Monitor risk mitigation and policy controls, and follow up on findings from audits, self-assessments and assessments to ensure remediation
• Track compliance with regulatory and international information and cyber security standards
• Work with procurement, vendor management and legal to ensure supplier contracts meet cyber security requirements
• Take part in investigations of suspected unlawful or fraudulent cyber security breaches
• Help identify, implement and assess process-based security controls and take part in security plans and stakeholder reviews
• Manage the cyber awareness program: train employees and stakeholders, run awareness campaigns within budget, draft awareness materials and set performance indicators
• Ensure business processes do not conflict with cyber security requirements and help build relationships with internal and external stakeholders

Required profile

• Bachelor's degree in Computer Science, Engineering or Business, or equivalent diploma with additional experience; MBA or Master's in computer science, engineering or information security preferred
• 7+ years of information technology experience and 4+ years of relevant experience
• Experience managing cyber risk programs, information and cyber security awareness programs, and cyber security policies, standards and guidelines
• Experience in multiple industries (e.g. oil and gas, energy, utilities, retail, government) is preferable

Required skills

• Professional certification such as CISSP, CISM, C-CISO or GSEC
• Information security policies, standards and procedures, and the Information Security Management System (ISMS)