Engineer, IT Security

<b>Job Purpose:</b><br> <br>To monitor, report and assess any possible IT and OT security risks, breaches and vulnerabilities in ALL ADNOC REFINING environment including systems and the network. Carries out maintenance and internal audits of the information security function and advises on best practice on implementing effective procedures based on company policies and international standards. To makes sure that all business processes incorporate adequate information security controls both during design and in operations.<br><br><b> Key Accountabilities: </b><ul> <li>Implements and maintains security policy approved by the management, in addition to tracking security policy changes. Reviews policies and procedures including incident handling procedure, change management procedure, IT Disaster Recovery policies and procedures, Backup & Restore procedure, Password management procedure etc.</li> <li>Implements an engaging and creative employee education and awareness program and conducts regular training sessions.</li> <li>Manages security incidents and events to protect corporate IT assets, including intellectual property, regulated data and the company's reputation.</li> <li>Assists in risk management activities including conducting assessments to meet objectives.</li> <li>Acts as representative with internal/external auditors regarding assessments and testing of information security and risk management.</li> <li>Consults on the development of current, annual, and long-term cybersecurity and Information Technology objectives.</li> <li>Researches/investigates emerging business application security topics, threats, capabilities, and solution options to update policy and governance, technology strategies, solution architecture, and vulnerability assessments.</li> <li></li> <li>Administers and monitors security systems for intrusions to ensure proper operation of systems including but not limited to firewalls, IDS, antivirus & email anti-spam. Installs security software, monitors networks for security threats, responds to cyber-attacks, and gathers data and evidence to be used in prosecuting cybercrime.</li> <li>Conducts security risk assessments, various security vulnerability checks, and penetration tests and produces clear results and measures. Conducts periodic audits for compliance to security policy and submits a self-audit report to management.</li> <li>To be thoroughly aware of the National Information Security standards and guidelines. To act as a focal point from the IT Division to facilitate the compliance to the standards across the entire organization. To ensure the controls stated in the standard are clearly explained to all internal stakeholders in order to implement the stated controls and to maintain the required compliance</li> <li>Participates in reviewing technical design and IT engineering and provides inputs related to these projects.</li> <li>Ensures proper implementation and participates in acceptance tests on behalf of the mentioned IT projects.</li> <li>Takes counter measures, in coordination with other departments, and works closely with IT Personnel to develop solutions to security problems, workout security issues and overall requirements</li> </ul><br><b><b>QUALIFICATIONS, EXPERIENCE, KNOWLEDGE & SKILLS:</b></b><br> <br><b>Minimum Qualification</b><br> <br>Bachelor's Degree in computer / IT or equivalent Professional Qualification<br> <br><b>Minimum Experience & Knowledge & Skills</b><br> <br>5 Years of experience in IT/Information Security. Clear understanding of knowledge of IT and OT infrastructure design and operations. Computer literate. Excellent command in written and spoken English Language. <br><br>Group Company: ADNOC Refining <br><br>May 27, 2022