Information Assurance Analyst - Doha, دولة قطر - RIGZONE PETROLEUM COMPANY
وصف
Ensure the security of Operations Technology(OT) systems through the identification, resolution, prevention andmitigation of risks, threats and concerns with Industrial ControlSystems (ICS) / Supervisory Control and Data Acquisition Systems(SCADA).
Education
•Bachelor's degree in information security, ComputerScience, or Engineering.
• 10 years ofOperational Technology experience within utility environmentpreferably Oil & Gas.
•Experience with Qatar NISS, IEC 62443/ISA 99, NIST SP 800 82, NEI08 09, ISO 27001, ISO 27005, other industrial controlregulations.
• Demonstrate experienceworking with automation vendors such as ABB, Siemens, Rockwell,Honeywell, Yokogawa etc.
• Experiencesecuring cross-domain IT/OT communications andpathways.
• Advanced proficiency inindustrial communications, PLC, DCS, SIS, HMI or SCADA systems.Experience supporting and troubleshooting industrial protocols suchas OPC, Modbus TCP, HART, Foundation Fieldbus.
•Experience with OT security designs anddeployments.
• Relevant securitycertifications CISSP, CISM, CEH,GICSP.
• Relevant networkingcertifications CCNA, CCNA Security andCCNP.
• Demonstrated experience workingwith OT cloud platforms.
• Excellentwritten and verbal business communicationskills.
Experience& Skills
•Subject matter expert for OT cybersecurity with a focus on securityassurance, cyber-risk management, and implementation of securityprograms and solutions.
• Implementcybersecurity program in OT, including data and process protection,vulnerability management, identity management, amongothers.
• Conduct security assessmentsfor Industrial Control Systems(ICS)/SCADA.
• Design and supportimplementation of various OT solutions in industrialenvironments.
• Assure measurement ofcybersecurity metrics and programs for key security, risk,compliance, and service continuityindicators.
• Technical securityexpertise in OT to identify security technology solutions anddevelop security reference architectures and strategies to achievebusiness results.
• Solve complexdigital and operational security problems in Industrial ControlSystems (ICS) used within QP's critical infrastructurecyber-landscape.
• Validate and verifysystem security requirements and work within current changemanagement processes supporting changes in OTenvironment.
• Technical evaluation andacceptance of new security solutions.