Cyber Security Manager

Job Purpose:
The Cyber Security Operation Manager is responsible for overseeing the cyber security of OETC’s OT and IT systems, ensuring compliance with cybersecurity regulations and industry best practices. Key responsibilities include threat monitoring, incident response, risk assessment, security architecture, and audits to protect critical infrastructure. The role involves vendor risk management, project execution, asset lifecycle management, and CSOC operations to enhance cybersecurity resilience. Additionally, the position ensures business continuity, stakeholder training, and QHSE compliance, integrating cybersecurity with safety and operational reliability while leading cybersecurity initiatives and ensuring proactive risk mitigation.
Description:
1. Cyber Security Operations
• Manage the Cyber Security Operations Center (CSOC) for continuous monitoring and threat detection.
• Oversee SIEM, SOAR, EDR, MFA, and other security technologies.
• Ensure timely incident detection, escalation, containment, and recovery.
• Lead cyber incident investigations and forensic activities.
• Maintain cybersecurity dashboards, alerts, and KPI reporting.
2. OT / SCADA Security
• Protect SCADA, DCS, ICS, and OT networks from cyber threats.
• Implement network segmentation, secure remote access, and industrial firewalls.
• Ensure patching, firmware management, and hardening of OT assets.
• Conduct OT vulnerability assessments and security reviews.
3. Governance, Risk & Compliance
• Ensure compliance with applicable cybersecurity laws, regulations, and internal policies.
• Conduct cybersecurity risk assessments across IT and OT assets.
• Maintain risk registers and remediation plans.
• Lead internal and external cybersecurity audits.
• Coordinate regulatory submissions and evidence requirements.
4. Asset Security Management
• Maintain inventory of cybersecurity-related IT and OT assets.
• Ensure asset classification based on criticality and risk.
• Manage secure lifecycle of assets from acquisition to disposal.
• Ensure secure disposal aligned with environmental standards.
5. Projects & Vendor Management
• Lead cybersecurity projects from planning through implementation.
• Manage project budgets, procurement, and vendor contracts.
• Evaluate third-party cybersecurity risks.
• Ensure vendors comply with OETC security standards.
6. Business Continuity & Resilience
• Develop and maintain cyber incident response plans.
• Support disaster recovery and backup restoration testing.
• Lead cyber resilience exercises and readiness programs.
• Minimize operational downtime caused by cyber incidents.
7. Awareness & Leadership
• Lead and develop cybersecurity operations teams.
• Identify skill gaps and implement training plans.
• Deliver cybersecurity awareness programs across the business.
• Promote a culture of cyber safety and accountability.
8. QHSE Responsibilities
• Ensure compliance with OETC QHSE policies.
• Identify cyber risks that may impact safety or operations.
• Coordinate with HSE teams on industrial cybersecurity risks.
Job Qualifications and Experience
Education:
• Bachelor Degree in Computer Engineering / Computer Science or related engineering area.
Experience:
• 9+ years’ experience in cyber security policies & procedures SCADA/Telecommunication/IT systems, including 2 years in a leadership role.
• Experience on different SCADA/Telecommunication/IT cyber security international standards like ISO, NERC or NIST
• Deep understanding of TCP/IP and good knowledge on any industrial communication protocols like ICCP, IEC 60870-5, IEC 61850, and MODBUS …etc.
• Knowledge of Field Area Network Architectures for Electrical Transmission control and automation.