Lead Information Security (Risk)

<p><b>Department</b><br />
INFORMATION &amp; COMMUNICATION TECHNOLOGY<br />
<br />
<b>Title</b><br />
LEAD, INFORMATION SECURITY (RISK)<br />
<br />
<b>Primary Purpose of Job</b><br />
Lead initiatives and activities to enhance information security posture of QatarEnergy (IT and OT) by identifying, assessing and managing cyber and information security risks according to the corporate information security risk management standard and industry best practices. This position leads the information security risk management program and coordinates the activities of the team delivering this capability. This position requires extensive technical skills in both OT and IT domains, deep knowledge to identify, classify, and evaluate information security risks, and a strong understanding of Oil &amp; Gas operational and business processes.<br />
<br />
<b>Education</b><br />
Bachelor degree in information security, computer science, or engineering<br />
<br />
<b>Experience &amp; Skills</b><br />
&bull; 10+ years of relevant professional experience. &bull; Professional certifications in information security (e.g., CISSP, CISA, GIAC, ISO 27001, ISO27005, etc.). &bull; Experience with control frameworks and standards (e.g., NIST, IEC 62443, etc.). &bull; Experience with large ICS &amp; ICT environments in the Energy sector, preferably Oil &amp; Gas &bull; Leadership skills for conducting risk assessment, analysis and tracking. &bull; Strong knowledge of information security capabilities, requirements analysis and addressing challenges in practical application. &bull; Excellent written, verbal and presentation communication skills. &bull; Strong team management, planning and coordination skills.<br />
&nbsp;</p>