Cyber Security Engineer

JOB DESCRIPTION OT / ICS Operations & Security Management • Support the company's ICS/OT operations, including networks, systems, endpoints, and cybersecurity tools. • Maintain OT system and network monitoring to ensure availability and reliability. • Configure, troubleshoot, and provide day-to-day operational support for cybersecurity solutions within the ICS environment. • Support day-to-day control system operations and troubleshoot issues to ensure reliable plant performance. • Monitor systems for unusual or suspicious activities and respond to cybersecurity incidents, alerts, and threats. • Maintain and enhance security controls for critical systems to meet operational and cybersecurity requirements. • Manage CII system and network backup processes to ensure business continuity and recovery readiness. Information Security Governance & Compliance • Manage and maintain the organization's Information Security Management System (ISMS). • Conduct annual reviews and updates of ISMS policies, procedures, and supporting documentation. • Implement and maintain cybersecurity requirements in compliance with CSA, PSO, EMA, CCOP, ISO 27001:2022, and other applicable standards and regulations. • Take ownership of ISMS-related activities and continuous improvement initiatives. • Serve as the key liaison between the organization, customers, auditors, service providers, and internal information security stakeholders. Risk, Vulnerability & Security Assessment • Conduct annual cybersecurity risk assessments for Critical Information Infrastructure (CII) systems. • Identify, assess, and mitigate cybersecurity risks to ensure critical systems remain secure and resilient. • Perform vulnerability management and patch management activities for OT/ICS environments. • Plan and execute cybersecurity activities including: • Vulnerability Assessments (VA) • Penetration Testing (VAPT) • Threat Hunting • Purple Team Exercises • Tabletop Exercises • Security Reviews and Assessments • Review cybersecurity advisories and implement mitigation measures where necessary. Audit & Regulatory Management • Support and coordinate internal and external cybersecurity audits. • Plan and execute annual cybersecurity audit programs. • Coordinate CSA audits, vulnerability assessments, compliance reviews, and mandated regulatory audits. • Ensure audit findings are tracked, remediated, and closed within agreed timelines. • Support information security requirements during both internal and external audits. Security Projects & Technology Improvement • Review existing technology architecture and identify vulnerabilities, weaknesses, and improvement opportunities. • Plan, implement, and oversee cybersecurity technology upgrades, enhancements, and major system changes. • Develop technical solutions, cost estimations, budgets, and proposals to meet cybersecurity requirements for internal and external projects. • Support the delivery, commissioning, and cybersecurity assurance of new projects and plant systems. • Ensure all new systems meet operational, cybersecurity, and regulatory requirements before deployment. Vendor & Stakeholder Management • Work closely with business units, service providers, and external stakeholders to ensure OT cybersecurity requirements are met. • Collaborate with internal IT security personnel and Site Information Security Officers (SITSO) on cybersecurity initiatives. • Evaluate and monitor cybersecurity service performance and Key Performance Indicators (KPIs) of third-party vendors and contractors. • Coordinate cybersecurity activities with the EC&I Department and support departmental objectives. Training & Awareness • Develop and deliver cybersecurity awareness programs and training sessions for employees. • Promote cybersecurity best practices across the organization. Provide guidance and support to users on cybersecurity policies, procedures, and compliance requirements.' JOB REQUIREMENTS Qualifications & Experience • Degree or Diploma in Cybersecurity, Information Technology, Computer Engineering, Electrical & Electronic Engineering, or a related discipline. BUSINESS SEGMENT Infrastructure PLATFORM Operating Division