Sr. Information Security Analyst (Governance, Risk & Controls)

<p><b>Department</b><br />
INFORMATION &amp; COMMUNICATION TECHNOLOGY<br />
<br />
<b>Title</b><br />
SR. INFORMATION SECURITY ANALYST (Governance, Risk &amp; Controls)<br />
<br />
<b>Primary Purpose of Job</b><br />
Governance and execution of the Information Security Management System (ISMS) including developing policies, standards and procedures required for the corporate information security in both an information technology (IT) and operational technology (OT) capacity. Define required information security policies, standards and procedures related to their areas of operation as well as raising awareness of those polices, standards and procedures. Conduct compliance and operational maturity assessments to ensure optimal operation of the information and operational technology environments under the guidelines of the ISMS.<br />
<br />
<b>Education</b><br />
&bull; Bachelor degree in information security, computer science, or engineering. &bull; Professional certifications in information security management and standards compliance (e.g., CISSP, CISA, GIAC, ISO 27001, etc.) and experience with control frameworks (e.g., NIST Cybersecurity Control Framework).<br />
<br />
<b>Experience &amp; Skills</b><br />
10+ years of relevant professional experience. &bull; Experience with large ICS &amp; ICT environments in the Energy sector, preferably in Oil &amp; Gas. &bull; Experience with and understanding of customized information security management systems. &bull; Experience in information security awareness initiatives and community building. &bull; Knowledge of information security capabilities and requirements analysis. &bull; Knowledge of relevant state laws, industry regulations, and security standards. &bull; Excellent written, verbal and presentation communication skills.<br />
&nbsp;</p>