SR INFORMATION SECURITY ANALYST -
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Job Description
Company
QatarEnergy is an integrated national oil corporation that stands at theforefront of efforts for the long term sustainable
developmentutilization and monetization of oil and gas resources in the State ofQatar. In its efforts to become one of the
best national energycompanies in the world QatarEnergys activities and those of itssubsidiaries and joint ventures
encompass the entire spectrum of theoil and gas value chain locally regionally and internationally. Theyinclude the
exploration refining and production marketing and sale ofoil and gas liquefied natural gas (LNG) natural gas
liquids(NGL) gasto liquids (GTL) products refined products petrochemicalsfertilizers steel and aluminum. As an
integrated corporationQatarEnergys activities also include marketing and sale of oil and gasand other various products.
QatarEnergys operations and activities areconducted at various onshore locations including Doha Dukhan and
theMesaieed and Ras Laffan Industrial Cities; and at various offshoreareas such as offshore oilfields production stations
drillingplatforms Halul oil export island and the North Field which is thelargest single nonassociated gas reservoir in the
world covering anarea of 6000 square kilometers. The utilization of this fields massivereserves has become a primary
national goal to continue the developmentand prosperity of the country. QatarEnergy pays the utmost attention tothe health
and safety of its employees contractors visitors and thelocal communities where it operates. From drilling to
constructionoperations to decommissioning QatarEnergys health safety andenvironment policy forms an integral part of
the corporations dailybusiness and long term planning. QatarEnergy is committed to contributeto a better future by meeting
todays economic needs while safeguardingour environment and resources for generations to come. Thriving oninnovation
and excellence QatarEnergy is bound to the highest levels ofsustainable human socioeconomic and environmental
development inQatar and beyond.
Department
INFORMATION & COMMUNICATION TECHNOLOGY
Primary purpose of job
Governance and execution of the Information Security Management System (ISMS) including developing
policiesstandards and procedures required for the corporate information security in both an Information
technology (IT) and Operational Technology (OT) capacity.
Define required information security policies standards and procedures related to their areas of operation as well as
raising awareness of those polices standards and procedures.
Ensure adequate an effective IT controls exist to meet applicable current and future security compliance requirements.
Conduct compliance and operational maturity assessments to ensure optimal operation of the information and
operational technology environments under the guidelines of the ISMS.
Develop reporting Metrics dashboards and evidences of compliance activities.
Coordinate with IT stakeholders project managers and business owners to facilitate vendor risk assessments due
diligence review and security requirements definition. Maintain thirdparty assessment documentation.
Stay updated on the latest security trends emerging threats and best practices to continuously improve the overall
security posture.
Coordinate and align activities between Information Security and Business Continuity and liaise within IT Department
to ensure business continuity and disaster recovery plans are in place tested and report regularly.
Carry out other Security related activities as assigned by team Lead.
Experience & Skills
10 years of relevant professional experience.
- Experience with large ICS & ICT environments in the Energy sector preferably in Oil & Gas.
- Experience with and understanding of customized information security management systems.
- Experience in defining Governance Risk and Compliance (GRC) processes and leveraging industrystandard GRC
- Knowledge of information security capabilities and requirements analysis.
- Knowledge of relevant state laws industry regulations and security standards.
- Excellent written verbal and presentation communication skills.
Education
Bachelor degree in information security computer science or engineering.
- Professional certifications in information security management and standards compliance (e.g. CISSP CISM
This job has been sourced from an external job board.
More jobs on
Employment Type
Full Time
