Job closed
Ref: KP658-278
Job description / Role
Aramco energizes the world economy.
Aramco occupies a unique position in the global energy industry. We are the world's largest producer of hydrocarbons (oil and gas), with the lowest upstream carbon intensity of any major producer.
With our significant investment in technology and infrastructure, we strive to maximize the value of the energy we produce for the world along with a commitment to enhance Aramco's value to society.
Headquartered in the Kingdom of Saudi Arabia, and with offices around the world, we combine market discipline with a generations' spanning view of the future, born of our nine decades experience as responsible stewards of the Kingdom's vast hydrocarbon resources. This responsibility has driven us to deliver significant societal and economic benefits to not just the Kingdom, but also to a vast number of communities, economies, and countries that rely on the vital and reliable energy that we supply.
We are one of the most profitable companies in the world, as well as amongst the top five global companies by market capitalization.
Overview
We are seeking a Process Automation Network and Cybersecurity Engineer to join our Global Manufacturing Excellence Organization within our Manufacturing Technical Support Division team.
The manufacturing technical support team is a multi-disciplinary organization with interface to technical, and in some cases business, support requirements for our Global Manufacturing Admin Area. Its function caters mainly to the technical needs of GM Operating facilities.
Your primary role will be to handle plant cybersecurity engineering aspects. This will include providing technical support for establishing and maintaining cybersecurity compliance and risk program across multiple operating facilities from Global Manufacturing Admin Area. You will also be responsible for providing to provide SME guidance and support for any cybersecurity controls, risk remediation, compliance issues and cybersecurity technology deployments.
Key Responsibilities
As the successful candidate you will be required to perform the following:
Provide technical guidance, support, training, and expertise for OT cybersecurity compliance, controls, and risks.
Conduct different cybersecurity compliance assessments, risk assessments, business impact analysis and other cybersecurity reviews.
Analyze technical controls to ensure that specific security and compliance requirements are met through the verification of documented processes, procedures and standards in order to validate maintenance of secure configurations.
Serve as a subject matter expert for information security principles and practices, and promoting a culture of security throughout the organization.
Provide support for threat intelligence and vulnerability management programs across the organization.
Conduct risk assessments to identify cybersecurity risks and provide recommendations for risk treatment.
Support incident response and reporting program by providing expert guidance in collaboration with corporate teams.
Assist with the development of security policies and procedures for all different security domains.
Work closely with corporate experts for enhancing cybersecurity maturity of plants as per the defined models.
Provide SME support for critical cybersecurity related projects to ensure the implementation in accordance with applicable standards.
Develop and manage key performance metrics to track and ensure compliance with established policies and standards.
Participate in the development of security awareness programs for all relevant support teams.
Requirements
Minimum Requirements
You must hold a Bachelor degree in Computer Engineering, Computer Science, Information Security, MIS or equivalent.
You should have a minimum of 12 years of IT/OT cybersecurity experience specifically in cybersecurity compliance, controls implementation and risk management. Oil and Gas Industry experience is preferred.
At least one industry certification (e.g. CISA, CISM, CRISC, CISSP, ISAAP) is highly desired.
You must have strong analytical and troubleshooting skills in the field of cybersecurity.
Experience in solution Windows and Linux Operation Systems Security.
Understanding and experience of network security tools and controls such as Network Switches and Routers, Firewalls, Intrusion Detection Systems, Data Diodes, Security Monitoring, Network Vulnerability Assessment and Threat Intelligence.
Understanding and experience implementing cybersecurity international standards such ISO27001/27005, NIST, IEC 62443, ISA, etc.
Experience in LAN/WAN architectures & related diagnostic tools.
Experience and knowledge designing and optimizing complex LAN environments LAN/WAN and wireless networking principles and protocols including Ethernet, TCP/IP, VLAN, WLAN, Frame Relay, Firewall, DMZ, VPN, IDS, switches, routers, firewalls TCP/IP protocols - SMTP, SNMP, FTP, HTTP, SSH, SSL Experience Network Security - Firewall, ACL, IDS, IPS, SIEM Specific experience in Routers, Switches, or Firewalls Microsoft - Active Directory, DNS, WSUS, Terminal Server Experience with anti-virus systems, backup & restore solutions, system management.
Working environment
Our high-performing employees are drawn by the challenging and rewarding professional, technical and industrial opportunities we offer, and are remunerated accordingly.
At Aramco, our people work on truly world-scale projects, supported by investment in capital and technology that is second to none. And because, as a global energy company, we are faced with addressing some of the world's biggest technical, logistical and environmental challenges, we invest heavily in talent development.
We have a proud history of educating and training our workforce over many decades. Employees at all levels are encouraged to improve their sector-specific knowledge and competencies through our workforce development programs - one of the largest in the world.
About the Company
Saudi Aramco is an integrated global energy enterprise. The company markets and exports crude oil, petroleum products, natural gas liquids and sulfur. It also ships crude oil worldwide through an affiliated company and participates in petroleum refining and marketing activities at home and abroad. Its overseas affiliates are in the United States, Egypt, the Philippines, the Republic of Korea and Japan.
Saudi Aramco's subsidiaries span the globe, with offices in Houston, Washington, New York, London, Leiden, Dubai, Singapore, Beijing, Hong Kong, Tokyo and Seoul.