Job Description

Posting Date: 18 Jul 2024
Requisition ID: 2078
Company: NAWAH
Job Purpose

Lead the continuous improvement of effective protection to ensure the protection of Nawah Operational Technology (OT) information systems from unauthorized disclosure or modification. To coordinate with system owners and internal stakeholders to ensure the improvement of Nawah's security posture.

Key Activities, Responsibility & Accountability

OT Network and System Security assessment



• Lead analysis and assess vulnerabilities in the OT infrastructure (software, hardware and network).
• Investigate available tools and countermeasures to remedy the detected OT vulnerabilities and recommend best solutions and practices.

Security monitoring and forensics
• Perform security monitoring, security and data/logs analysis and forensic analysis of OT systems to detect security incidents and root causes of incidents including configuring, managing and reviewing vulnerability scans.
• Lead the investigation and use new technologies and processes to enhance OT security capabilities and implement improvements.


Security Architecture design
• Lead the design of an OT Cyber security system or major components of an OT Cyber security system.
• Identify gaps and recommends ways to improve a system security.
• Evaluate all modifications to CDA/DDA before implementation ensuring that new/modified CDAs are reviewed and CDA assessment performed accordingly



Responsibilities & Accountabilities (contd.)

Administration



• Supports the personnel department and all correlating functions such as Information security in reporting and recommending enhanced security solutions.
• Ensure all Action Requests (ARs) are monitored, reviewed, actioned, and closed within agreed time parameters.
• Assists the Head of Information Security Assurance in the preparation of the annual section budget.

Stakeholder Engagement

Responsibilities and Accountabilities:

• Perform periodic awareness campaigns to promote safe and secure OT security behaviors on plant including procedures for using and handling Portable Mobile and Media Devices (PMMD) on the plant.
• Support FANR inspections with applicable data and information as required and follow up any remedial actions.



Professional Certifications
Qualifications

Bachelor's Degree with 5 years' experience, Diploma, Military or Police Academy graduate with 10 years' experience, or High School with 12 years' experience

Experience