IT Security Officer

About the role

Stena Drilling is looking for an IT Security Officer on a full-time basis. The role covers the development of IT security policies, the evaluation of the organisation's security posture, incident handling and collaboration with the Data Protection Officer, the IT, engineering and managed security teams, as well as offshore security and offshore visits.

Key responsibilities

• Work within IT strategy to support the company's mission and core objectives.
• Develop IT security policies and procedures, and continuously evaluate the security posture, identifying improvements and implementing changes.
• Establish and develop solution architecture for IT security and end-user service domains, integrating security across the organisation.
• Drive vulnerability management and secure the design of IT services.
• Monitor, identify and resolve incidents, report IT security KPIs and incidents, and work with the Data Protection Officer on compliance, data searches and subject access requests.
• Collaborate with IT teams in Stena Drilling and Stena Group, the engineering team on offshore security, and take part in group IT/OT security events and projects.
• Work with the managed security service provider, maintain the enterprise backup system, liaise with third-party security providers and take part in security audits.
• Deliver IT security tests, exercises and user education, and visit offshore units and shore offices as needed.
• Take part in on-call and shift rotas, implement changes according to the change management procedure, and attend training courses.

Required profile

• University degree in Computer Science or similar.
• Experience in information security roles, implementing and managing IT security systems, and in the oil and gas sector with offshore survival.
• CISA or CISP certification or other proof of experience or competence.
• Commitment to a positive working environment, teamwork, communication skills and a logical approach to problem solving.

Required skills

• Familiarity with security best practices and standards such as NIST, CIS and ISO.
• Knowledge of IT change management procedures and use of elevated account privileges in line with documented procedures.