cyber security specialist

<div><p><b>Minimum qualifications:
</b></p><ul><li>Bachelor's in computer science or information security or MIS
</li><li>Preferably at least one of the following professional certifications:
<ul><li>GREM (GIAC Reverse Engineering Malware)
</li>GCTI (GIAC Cyber Threat Intelligence)<br>
<li>
</li></ul></li></ul><p></p><p><b>Minimum experience:
</b></p>Minimum 4-7 years of experience with 2&ndash;4 years in threat research/reversing/detection engineering, preferably with banking/fintech exposure.<br>
<ul><li>
</li></ul><p></p><p><b>Skills &amp; Competence
</b></p><ul><li>Communicate, present and report to relevant stakeholders
</li><li>Decompose and analyze systems to develop security and privacy requirements and identify effective solutions
</li><li>Decompose and analyze systems to identify weaknesses and ineffective controls
</li><li>Generate new ideas and transfer theory into practice
</li><li>Identify and solve cybersecurity-related issues
</li>Monitor new advancements in cybersecurity-related technologies<br>
<li>
</li></ul><p></p><p><b>Key Knowledge
</b></p><ul><li>Cybersecurity standards, methodologies and frameworks
</li><li>Cybersecurity-related research, development and innovation (RDI)
</li><li>Legal, regulatory and legislative requirements on releasing or using cybersecurity related technologies
</li><li>Multidiscipline aspect of cybersecurity
</li><li>Responsible information disclosure procedures</li></ul></div><p></p>
<br><div><p><b>Minimum qualifications:
</b></p><ul><li>Bachelor's in computer science or information security or MIS
</li><li>Preferably at least one of the following professional certifications:
<ul><li>GREM (GIAC Reverse Engineering Malware)
</li>GCTI (GIAC Cyber Threat Intelligence)<br>
<li>
</li></ul></li></ul><p></p><p><b>Minimum experience:
</b></p>Minimum 4-7 years of experience with 2&ndash;4 years in threat research/reversing/detection engineering, preferably with banking/fintech exposure.<br>
<ul><li>
</li></ul><p></p><p><b>Skills &amp; Competence
</b></p><ul><li>Communicate, present and report to relevant stakeholders
</li><li>Decompose and analyze systems to develop security and privacy requirements and identify effective solutions
</li><li>Decompose and analyze systems to identify weaknesses and ineffective controls
</li><li>Generate new ideas and transfer theory into practice
</li><li>Identify and solve cybersecurity-related issues
</li>Monitor new advancements in cybersecurity-related technologies<br>
<li>
</li></ul><p></p><p><b>Key Knowledge
</b></p><ul><li>Cybersecurity standards, methodologies and frameworks
</li><li>Cybersecurity-related research, development and innovation (RDI)
</li><li>Legal, regulatory and legislative requirements on releasing or using cybersecurity related technologies
</li><li>Multidiscipline aspect of cybersecurity
</li><li>Responsible information disclosure procedures</li></ul></div><p></p>

Cyber Security Research Specialist

<div></div><div><div>Primary Details</div>
Time Type: Full time<div></div>
Worker Type: Employee<div></div><div>
The Opportunity:</div><div>
The Global Cyber Security Governance Specialist supports QBE&rsquo;s cyber security objectives by providing clear, data-driven insights into the performance of key controls and the organization&rsquo;s overall security posture. The role is responsible for tracking and analyzing control metrics, surfacing risk signals, and contributing to reporting for governance forums, senior stakeholders, and regulatory engagements.</div><div><br>
In addition to core metrics and reporting responsibilities, the role plays a key part in QBE&rsquo;s cyber scenario modelling program, supporting scenario definition, refinement, and alignment with threat intelligence and attack tree methodologies. The Specialist integrates modelling outputs into narrative reporting, helps ensure scenarios remain defensible and relevant, and contributes to structured scenario refresh cycles. The Specialist integrates modelling outputs into narrative reporting, helps ensure scenarios remain defensible and relevant, and contributes to structured scenario refresh cycles.</div><div></div><ul><li> Location: Sun Prairie, WI - New York, NY - Chicago, IL - Atlanta, GA - Boston, MA -</li><li> Work Arrangement: hybrid working expectations</li><li> The starting salary for this role is between $133,500.00 and $251,000.00</li></ul><div></div><div><br>
Your new role</div><ul><li><div>
Monitor and analyze cyber control performance metrics and key risk indicators (KRIs) to identify trends, emerging risks, and opportunities for control uplift.</div></li><li><div>
Develop and maintain reporting artefacts (e.g. dashboards, briefings, governance packs) that clearly communicate security posture and risk insights to a range of stakeholders, including senior management and governance forums.</div></li><li><div>
Translate complex control and risk data into actionable insights, enabling stakeholders to make informed trade-offs aligned with QBE&rsquo;s risk appetite and strategic priorities.</div></li><li><div>
Support cyber scenario modelling activities, including scenario definition, refinement, and alignment with threat intelligence and attack tree structures. Ensure scenarios remain accurate, defensible, and relevant to QBE&rsquo;s operating environment, drawing on established methods and practices referenced in stakeholder materials and scenario modelling roadmaps. This includes coordinating scenario refresh cycles, supporting capability assessment inputs, incorporating modelling outputs into reporting, and validating narrative‑to‑model alignment.</div></li><li><div>
Collaborate with control owners, delivery teams, and second-line functions to improve the quality, clarity, and consistency of control performance data and reporting inputs.</div></li><li><div>
Support the integration of control telemetry and other evidence-based measures into reporting processes, with a focus on control immutability and automation where feasible.</div></li><li><div>
Contribute to the continuous improvement of governance and reporting frameworks, ensuring alignment with QBE&rsquo;s cyber strategy, regulatory obligations, and business needs.</div></li><li><div>
Participate in targeted, risk-informed assurance activities that validate control effectiveness in high-priority areas, complementing formal audits and RCSA processes.</div></li><li><div>
Act as a feedback channel to Strategy &amp; Architecture and other stakeholders, highlighting implementation challenges or systemic issues surfaced through metrics or reporting.</div></li><li><div>
Engage stakeholders to support a culture of risk transparency and accountability, encouraging proactive issue identification and evidence-based dialogue.</div></li><li><div>
Support audit and regulatory engagement by ensuring reporting artefacts and supporting evidence are accurate, consistent, and audit-ready.</div></li></ul><div></div><div>
About you</div><ul><li><div>
Ability to get deeply technical and apply that skill to the business environment.</div></li><li><div>
Exceptionally curious and enquiring mindset with an ability to be fast-paced and agile in meeting business needs.</div></li><li><div>
Strong communication, negotiation, and conflict management skills, with an ability to anticipate and flag potential obstacles.</div></li><li><div>
Experience with security and risk-based standards, Microsoft Excel, Power BI and ERC tools.</div></li><li><div>
Experienced in working across time zones and collaborating in a multi-location environment.</div></li></ul><div></div><div>
Compensation Package: The salary range for this role is provided above. This is the national range for location(s) listed. The salary offer will be decided based on the role's complexity, its location, and the candidate&rsquo;s professional background, including their education and experience. Beyond the base salary, regular full-time and part-time employees will also be eligible for QBE&rsquo;s annual discretionary bonus plan based on business and individual performance. We encourage all candidates to apply, even if their salary expectations fall outside of this range, as we are committed to finding the right fit for our team.</div><div></div><div>
QBE Benefits: We offer a range of benefits to help provide holistic support for your work life, whatever your circumstances. As a QBE employee you will have access to:</div><ul><li><div>
Hybrid Working &ndash; a mix of working from home and in the office</div></li></ul><ul><li><div>
22 weeks of paid leave for family growth, with 12 weeks available to all parents on a gender-equal basis</div></li><li><div>
Competitive 401(k) program with company match up to 8%</div></li><li><div>
Well-being program including holistic wellbeing coaching, gym membership, confidential counselling, financial and legal advice</div></li><li><div>
Tuition Reimbursement for professional certifications, and continuing education</div></li><li><div>
Employee Network and Community &ndash; QBE actively supports six Employee Networks, and many ways to give back to your community</div></li></ul><div>
To learn more, click here: <div>Benefits | QBE US</div>.</div><div></div><div>
Why QBE? What if you could have a positive impact &ndash; at work and in the world?</div><div>
At QBE, we&rsquo;re enabling a more resilient future &ndash; for our customers, communities, environment, and for our people. We&rsquo;re building momentum to achieve something significant and know our people are at the center of our success.</div><div>
Our industry offers interesting and varied careers where you can help people to protect what matters most. As part of the QBE team, you&rsquo;ll get to spend every day working with people who are passionate, talented and kind. And our international scale means we&rsquo;re big enough for your ambitions, yet small enough for you to make a real impact.</div><div></div><div>
Join us now, so you can be part of our success &ndash; and we can be part of yours!</div><div><div>
https://www.linkedin.com/company/qbe-north-america/</div></div><div></div><div><br>
QBE is committed to providing reasonable accommodation to, among others, individuals with disabilities and disabled veterans. If you need an accommodation because of a disability to search and apply for a career opportunity with QBE, please inform our Talent Acquisition team to let us know the nature of your accommodation request and your contact information.</div><div></div><div><br>
Equal Employment Opportunity:</div><div>
QBE provides equal employment opportunities to applicants and employees without regard to race; color; gender; gender identity; sexual orientation; religious practices and observances; national origin; pregnancy, childbirth, or related medical conditions; protected veteran status; or disability or any other legally protected status.</div><div></div><div>
This position is not eligible for visa sponsorship. Applicants must be authorized to work in the United States on a full-time basis without the need for current or future sponsorship.</div><div></div><div><div><br>
Supplementary information</div></div><div></div><div>
Skills:</div>
Commercial Acumen, Communication, Conflict Management, Critical Thinking, Cybersecurity, Cyber Security Management, Cybersecurity Risk Management, Decision Making, Intentional collaboration, Legal Consulting, Managing performance, Problem Solving, Regulatory Compliance, Risk Management, Stakeholder Management<div></div><div>
How to Apply:</div><div>
To submit your application, click &quot;Apply&quot; and follow the step by step process.</div><div></div><div>
Equal Employment Opportunity:</div><div>
QBE is an equal opportunity employer and is required to comply with equal employment opportunity legislation in each jurisdiction it operates.</div></div>

Global Cyber Security Governance Specialist

<div><div><b>We help the world run better</b><br>
At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging &ndash; but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed.</div><div></div><p><b><br>
COMPANY DESCRIPTION</b></p><p>
SAP started in 1972 as a team of five colleagues with a desire to do something new. Together, they changed enterprise software and reinvented how business was done. Today, as a market leader in enterprise application software, we remain true to our roots. That&rsquo;s why we engineer solutions to fuel innovation, foster equality and spread opportunity for our employees and customers across borders and cultures.</p><p>
SAP recently decided to combine and harmonize all SAP Sovereign Cloud offerings, establishing an end-to-end process for the Public Sector and regulated industries. The newly created Global Sovereign Cloud Delivery &amp; Operations business unit is part of SAP Product Engineering with responsibility across the relevant Sovereign Cloud portfolio of SAP. Global Sovereign Cloud Delivery &amp; Operations is collaborating closely with all Board areas to establish a harmonized, scalable, and consistent offering with transparent and standardized deliverables.</p><p><b>
YOUR FUTURE ROLE</b></p><p>
We are looking for a <b>Security</b> <b>Compliance Senior Specialist</b> (f/m/d) within the Security &amp; Compliance unit of the newly formed Sovereign Cloud Technology &amp; Deliver team as part of the SAP Government Security &amp; Secrecy board area.</p><p>
In this role, you will become a founding member of the Technology and Engineering team. You will be engaging with existing infrastructure and product experts to help build a security and compliance program for Sovereign Cloud, including defining processes and requirements, conducting assessments, and managing process improvement.</p><div><b>
WHAT YOU BRING</b></div><div>
Due to the classified nature of our work, your willingness is required to subject yourself to a governmental security clearance process. Besides that, you bring:</div><ul><li>
Knowledge of FedRAMP assessment methodologies and enforcement procedures<ul><li>
Understanding of FIPS encryption requirements</li></ul></li><li>
Thorough understanding of security related topics</li><li>
Strong technology skills and the willingness to learn new topics quickly</li><li>
Strong analytical research and problem-solving skills<ul><li>
Ability to take large quantities of information and identify key themes</li><li>
Ability to clearly and succinctly describe processes</li><li>
Ability to manage through ambiguities while being innovative and collaborative</li></ul></li><li>
Strong communication skills and cultural awareness<ul><li>
Ability to communicate complex technical requirements to a variety of stakeholders</li></ul></li><li>
Strong commitment to high quality work</li><li>
Willingness to work flexible hours to accommodate time differences working with colleagues based in other time zones</li><li>
Willingness to travel (less than 10%)</li><li>
Fluent in English (required)<ul><li>
Fluent in other languages (second language preferred)</li></ul></li></ul><p><b>
WORK EXPERIENCE</b></p><ul><li>
4+ years of related professional experience, such as IT audit, risk management, or DevOps (required)</li><li>
Experience in leading audits of NIST SP 800-53, FedRAMP (required), and NIST SP 800-171 (preferred)</li></ul><p></p><p><b><br>
SAP'S DIVERSITY COMMITMENT</b></p><p>
To harness the power of innovation, SAP invests in the development of its diverse employees. We aspire to leverage the qualities and appreciate the unique competencies that each person brings to the company.</p><p>
SAP is committed to the principles of Equal Employment Opportunity and to providing reasonable accommodations to applicants with physical, sensory and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please contact us at Careers@sap.com. Requests for reasonable accommodation will be considered on a case-by-case basis.</p><div><b>
Bring out your best</b><br>
SAP innovations help more than four hundred thousand customers worldwide work together more efficiently and use business insight more effectively. Originally known for leadership in enterprise resource planning (ERP) software, SAP has evolved to become a market leader in end-to-end business application software and related services for database, analytics, intelligent technologies, and experience management. As a cloud company with two hundred million users and more than one hundred thousand employees worldwide, we are purpose-driven and future-focused, with a highly collaborative team ethic and commitment to personal development. Whether connecting global industries, people, or platforms, we help ensure every challenge gets the solution it deserves. At SAP, you can bring out your best.
<br>
<br>
<b>We win with inclusion</b><br>
SAP&rsquo;s culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone &ndash; regardless of background &ndash; feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world.<br>
<br>
SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team: Careers@sap.com.<br>
<br>
For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program, according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training.</div><div><br>
Qualified applicants will receive consideration for employment without regard to their age, race, religion, national origin, ethnicity, age, gender (including pregnancy, childbirth, et al), sexual orientation, gender identity or expression, protected veteran status, or disability.</div><div></div><div><b><br>
Compensation Range Transparency</b>: SAP believes the value of pay transparency contributes towards an honest and supportive culture and is a significant step toward demonstrating SAP&rsquo;s commitment to pay equity. SAP provides the annualized compensation range inclusive of base salary and variable incentive target for the career level applicable to the posted role. The targeted combined range for this position is 159800 - 271600(USD) USD. The actual amount to be offered to the successful candidate will be within that range, dependent upon the key aspects of each case which may include education, skills, experience, scope of the role, location, etc. as determined through the selection process. Any SAP variable incentive includes a targeted dollar amount and any actual payout amount is dependent on company and personal performance. Please reference this link for a summary of SAP benefits and eligibility requirements: SAP North America Benefits.</div><div><b><br>
AI Usage in the Recruitment Process</b></div><div>
For information on the responsible use of AI in our recruitment process, please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process.
</div><div>Please note that any violation of these guidelines may result in disqualification from the hiring process.<br>
<br>
Requisition ID: 448270 | Work Area: Information Technology | Expected Travel: 0 - 10% | Career Status: Professional | Employment Type: Regular Full Time | Additional Locations: #LI-Hybrid</div></div>

Senior Cyber Security Compliance Specialist

BAUER Group

<div>
 <strong>
  BAUER Spezialtiefbau GmbH
 </strong>
 is an international construction service provider whose primary focus is on complex specialist foundation engineering work in difficult ground conditions.
 <br/>
 <br/>
 <strong>
  Cyber Security Engineer (m/f/x)
  <br/>
  <br/>
 </strong>
 Job ID: req2235
 <br/>
 <br/>
 For our subsidiary BAUER Egypt S.A.E. in Egypt we are searching for a new IT team member as Cyber Security Engineer (m/f/x).
 <br/>
 <br/>
 <strong>
  Your tasks:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Analyze security incidents and breaches to identify root causes and perform forensic investigations
  </li>
  <li>
   Monitor security access and evaluate alerts from SIEM, IDS/IPS, and cloud security solutions
  </li>
  <li>
   Detect and assess anomalies and attack patterns across the Cyber Kill Chain
  </li>
  <li>
   Actively contain and mitigate malware propagation, C2 communication, exploits, infiltration attempts, and data leakage
  </li>
  <li>
   Continuously develop knowledge and skills by proactively learning new, job‑relevant security topics
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Your profile:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor's / Master&rsquo;s degree in Computer Science, Information Technology or equivalent education
  </li>
  <li>
   Several years of experience in security operations (L2/L3), including hands‑on work with Microsoft Defender ATP, Nessus, Proofpoint, Azure Security, the Office 365 security suite, and common IDS/SIEM technologies; solid understanding of Microsoft platforms (e.g., IIS, MS SQL Server, Windows Server, Windows 11) and network fundamentals
  </li>
  <li>
   Relevant information security certifications preferred (e.g., CISSP, CISA) or technical security certifications such as CCSP or OSCP
  </li>
  <li>
   Strong analytical and communication skills combined with creative, out‑of‑the‑box problem‑solving abilities
  </li>
  <li>
   Ability to communicate fluently in English, both speaking and writing
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  We offer you:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Attractive remuneration package
  </li>
  <li>
   Medicine Reimbursement per year
  </li>
  <li>
   Rice Allowance
  </li>
  <li>
   Leave days (Vacation, Sick, Maternity, Paternity, Emergency)
  </li>
  <li>
   HMO - Health card for hospitalization
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Your contact person:
  <br/>
  <br/>
 </strong>
 Marco Fischer, +49 (8252)97-3546
 <br/>
 <br/>
 The BAUER Group is a leading provider of services, equipment and products for ground and groundwater and generates total Group revenues of EUR 1.7 billion with around 12,000 employees.
 <br/>
 <br/>
 The Group's business activities are divided into three future-oriented segments: Construction, Equipment and Resources.
</div>


Cyber Security Engineer (m/f/x)

OQ Chemicals

<div><div><div><div><div><div><p><b>POSITION DESCRIPTION:</b></p></div></div><div><br>
<div>
<p><b>Position Title:</b></p></div><div><br>
<p>
Cyber security Operations JD</p></div></div><div><br>
<div>
<p><b>Reports to:</b></p></div><div><br>
<p>
ICT Manager</p></div></div><div><br>
<div>
<p><b>Department:</b></p></div><div><br>
<p>
ICT Department</p></div></div><div><br>
<div>
<p><b>Location:</b></p></div><div><br>
<div>
Duqm/ Ras Markaz/ Muscat</div></div></div><br>
</div>
</div><div></div><div><div><div><div><p><b>JOB PURPOSE:</b></p></div></div><div></div><div><br>
<div>
<p>The Specialist &ndash; Cyber Security Operations safeguards OTTCO&rsquo;s ICT, OMT, and OT environments by leading security operations, implementing the Minimum-Security Baseline (MSB) for networks, servers, and databases, and coordinating enterprise-wide incident response and risk management. The role ensures compliance with national regulators (e.g., OIA, NRAA) and relevant international standards, continuously reduces cyber risk through data-driven controls, tracks and optimizes direct and indirect cybersecurity costs, and delivers a pragmatic cybersecurity strategy that protects business continuity and supports OTTCO&rsquo;s operational goals.</p>
<p><b>
Description</b></p>
<p>
The Cyber Security Operations Specialist is responsible for safeguarding the organization&rsquo;s IT infrastructure and digital assets by managing and enhancing cybersecurity operations. This role involves administering and troubleshooting security solutions, overseeing CSOC activities, and ensuring timely resolution of security incidents. The specialist leads incident response processes, root cause analysis, and continuous improvement initiatives while driving cybersecurity projects such as SIEM implementation, firewall configuration, and endpoint protection. Additionally, the position requires governance of identity and access management, compliance with regulatory standards, and collaboration with internal teams and external stakeholders to strengthen security awareness and resilience across the organization.</p></div></div></div></div><br>
<div></div>
<div>
</div><div></div><div><div><div><div><p><b>REPORTING STRUCTURE:</b></p></div></div><p></p><div><div><br>
<div><b>
Number of Staff Supervised</b></div></div><div><br>
<p><b>
Direct Reports:</b></p></div><div><br>
<p><b>
0</b></p></div></div><div><br>
<div>
<p><b>Total:</b></p></div><div><br>
<p><b>
0</b></p></div></div><br>
</div>
</div><div></div><div><div><div><div><div><b>Key interactions</b></div>
<p><b>
Internal: </b>HSSE, Operations, Maintenance, Engineering, Finance, Procurement, Legal/Compliance, Records Management, Internal Audit, Corporate IT/OT teams.</p>
<p><b>
External: </b>EPC contractors, OQ/Group entities (as applicable), OEM vendors, Telecom providers, TRA/ROP (as applicable), OIA, NRAA, and other regulators/standards bodies.</p></div></div></div></div></div><p></p><div><div><br>
</div><p></p><div><div><br>
<div><div><p><b>Remote Job </b>Office environment, intensive computer screen use, sporadic visits to the operation site.</p></div></div><br>
<div>
<div><ul><li><b>Education: </b>Bachelor&rsquo;s degree in information security, Computer Science, Information Systems, or related field (Master&rsquo;s a plus).</li>
<li>Professional certifications (one or more preferred): CISSP, CISM, GCIH, GCIA, GCFE, CEH, OSCP, ISO/IEC 27001 Lead Implementer/Lead Auditor, GICSP/GRID (for OT), or SIEM vendor certifications.</li>
<li>Change Management certification/designation (desired).</li></ul></div></div></div></div><br>
<div></div>
<div>
</div><p></p><h1 class="jobSectionHeader"><b>Main tasks and responsibilities</b></h1><br>
<div></div>
<div>
<ul><li><b>Security Operations &amp; Incident Response</b></li></ul></div><br>
<p></p>
<div>
<div><ul><li>Run day-to-day cybersecurity operations and CSOC processes (monitoring, alert triage, case management, escalation, and closure).</li>
<li>Lead incident response lifecycle (prepare&ndash;detect&ndash;contain&ndash;eradicate&ndash;recover&ndash;lessons learned) and drive timely Root Cause Analysis (RCA) and corrective actions.</li>
<li>Maintain incident response plans/playbooks; conduct table-top exercises and post-incident reviews; measure MTTD/MTTR and improve year over year.</li>
<li>Coordinate with internal teams, vendors, and law enforcement/authorities as required.</li>
</ul></div></div><h1 class="jobSectionHeader"><b>2)</b> <b>Minimum Security Baseline (MSB) Implementation</b></h1><br>
<p></p>
<div>
<div><ul><li>Lead implementation and governance of MSB across <b>Networks, Servers, and Databases </b>for <b>IT, OMT, and OT</b></li>
</ul>
</div></div><div>environments.</div>
<div>
<div><ul><li>Define configuration baselines (hardening, patching, logging), establish compliance thresholds, and drive remediation with owners.</li>
<li>Maintain MSB exceptions/dispensations with risk acceptance and expiry tracking.</li>
</ul></div></div><h1 class="jobSectionHeader"><b>3)</b> <b>Governance, Risk, and Compliance (GRC)</b></h1><br>
<p></p>
<div>
<div><ul><li>Own and maintain the <b>Cyber Risk Register</b>: log risks, assess likelihood/impact, assign ownership, track treatment plans and due dates.</li>
<li>Perform <b>regular risk assessments </b>for ICT (systems, projects, third parties), including OT/OMT assets; update risk posture and report trends.</li>
<li>Ensure alignment with regulatory requirements and international standards; prepare and support audits/assessments and close findings on time.</li>
<li>Coordinate with national regulators (e.g., <b>OIA, NRAA</b>) and <b>international bodies </b>to interpret and implement applicable regulations and standards.</li></ul></div><br>
</div>
<div></div><h1 class="jobSectionHeader"><b>4)</b> <b>Architecture, Engineering &amp; Vulnerability Management</b></h1><br>
<p></p>
<div>
<div><ul><li>Administer and continuously improve security tooling: SIEM/UEBA, EDR, email security, cloud security (e.g., M365/Azure), firewalls/WAF, NAC, DLP, PAM, IDS/IPS, OT security monitoring, and vulnerability management.</li>
<li>Lead vulnerability scanning, secure configuration compliance, and patch orchestration with owners; track SLA- driven remediation.</li></ul></div><br>
</div>
</div><p></p><div><div><div><ul><li>Support secure solution design/reviews for projects and changes (IT/OT), ensuring &ldquo;secure-by-design&rdquo; and &ldquo;defense- in-depth&rdquo; principles.</li></ul></div><br>
</div>
<div></div><h1 class="jobSectionHeader"><b>5)</b> <b>Identity &amp; Access Governance</b></h1><br>
<p></p>
<div>
<div><ul><li>Govern identity lifecycle (Joiner&ndash;Mover&ndash;Leaver), privileged access, and periodic entitlement recertifications; enforce least privilege/segregation of duties.</li>
<li>Oversee MFA, conditional access, and access logging/monitoring; investigate anomalies with SOC.</li>
</ul></div></div><h1 class="jobSectionHeader"><b>6)</b> <b>Business Continuity, DR &amp; Data Protection</b></h1><br>
<p></p>
<div>
<div><ul><li>Support cybersecurity requirements for backups, disaster recovery, and OT resilience; validate through tests and exercises.</li>
<li>Ensure appropriate safeguards for sensitive data, records, and retention in line with NRAA and internal policy.</li>
</ul>
</div></div><p><b>Information Security Projects: </b>Oversee and provide support for information security projects, ensuring successful implementation and alignment with organizational goals.</p>
<h1 class="jobSectionHeader"><b>
7)</b> <b>Strategy, Financials &amp; Reporting</b></h1><br>
<p></p>
<div>
<div><ul><li><b>Track cybersecurity costs </b>(direct: tools, licenses, services; indirect: staff time, training, process overheads) and identify optimization opportunities.</li>
<li>Develop, update, and <b>submit the Cybersecurity Strategy </b>for OTTCO&rsquo;s <b>ICT and OT systems</b>, including roadmap, capability maturity, and investment plan.</li>
<li>Produce management reports/dashboards on risk, incidents, MSB compliance, vulnerabilities, audit status, KPIs, and budget performance.</li></ul></div><br>
</div>
<div></div><h1 class="jobSectionHeader"><b>8)</b> <b>Awareness, Training &amp; Stakeholder Management</b></h1><br>
<p></p>
<div>
<div><ul><li>Deliver cyber awareness programs/campaigns tailored to end users, admins, engineers, and executives (including OT/OMT context).</li>
<li>Coordinate with HSSE, Operations, Maintenance, and Engineering; manage vendors and service providers through SLAs and security clauses.</li></ul></div><br>
</div>
<div></div><h1 class="jobSectionHeader"><b>9)</b> <b>Quality, Policy &amp; Continuous Improvement</b></h1><br>
<p></p>
<div>
<div><ul><li>Develop and maintain cybersecurity policies, standards, procedures, architecture diagrams, and security documentation.</li>
<li>Interface with internal/external audits (QA/QC), close findings, and embed lessons learned into processes and tooling.</li>
</ul></div></div></div><h1 class="jobSectionHeader"><b>QUALIFICATIONS, EXPERIENCE, &amp; SKILLS:</b></h1>
<ul><li>+ 5 years total experience in IT &amp; Telecom; 5&ndash;8 years in Cyber Security Operations (preferably in Oil &amp; Gas or critical infrastructure).</li>
<li>Demonstrated experience implementing SIEM/SOC, EDR, firewalls/WAF, email/cloud security, and identity governance.</li>
<li>Hands-on with MSB/baseline hardening, vulnerability management, incident response, RCA, and audit closure.</li>
<li>Exposure to OT/ICS environments and mixed IT/OT security is strongly preferred.</li></ul><br>
<p></p>
<p>
Project and change management experience, vendor and contract management. Soft Competencies:</p>
<ul>
<li>A solid understanding of how people go through a change and the change process</li>
<li>Experience and knowledge of change management principles, methodologies and tools</li>
<li>Exceptional communication skills, both written and verbal</li>
<li>Excellent active listening skills</li>
<li>Ability to clearly articulate messages to a variety of audiences</li>
<li>Ability to establish and maintain strong relationships</li>
<li>Ability to influence others and move toward a common vision or goal</li>
<li>Flexible and adaptable; able to work in ambiguous situations</li>
<li>Resilient and tenacious with a propensity to persevere</li>
<li>Looking forward with a holistic approach</li>
<li>Organized with a natural inclination for planning strategy and tactics</li>
<li>Problem solving and root cause identification skills</li>
<li>Able to work effectively at all levels in an organization</li>
<li>Must be a team player and able to work collaboratively with and through others</li>
<li>Acute business acumen and understanding of organizational issues and challenges</li></ul><br>
<p></p>
<div><b>
Technical Competencies</b></div>
<ul>
<li><b>Security Operations: </b>SIEM (e.g., Microsoft Sentinel/Splunk), SOAR, UEBA, EDR (e.g., Defender for Endpoint), IDS/IPS, DLP, PAM, NAC, vulnerability scanners.</li>
<li><b>Network/Perimeter: </b>Firewalls, WAF, segmentation/micro-segmentation, VPN, DNS security, proxy, email security gateways.</li>
<li><b>Cloud &amp; Microsoft Security: </b>M365/Azure security, identity protection, conditional access, data/classification, AIP/MIP, Sentinel, Defender suite.</li>
<li><b>OT/OMT Security: </b>ICS/SCADA fundamentals, asset discovery, network zoning, passive monitoring, safe patching, vendor remote access.</li>
<li><b>IAM &amp; PAM: </b>RBAC, SoD, MFA, lifecycle automation, privileged session management.</li>
<li><b>Standards &amp; Frameworks: </b>ISO/IEC 27001/27002, NIST CSF, NIST SP 800‑53/800‑82 (ICS), IEC 62443 (OT), MITRE ATT&amp;CK/ATT&amp;CK for ICS.</li>
<li><b>Scripting &amp; Automation: </b>PowerShell and/or Python for data collection, enrichment, and response automation.</li></ul><br>
<p></p>
<p><b>
Documentation: </b>System security plans, network diagrams, runbooks/playbooks, risk and compliance artifacts..</p></div><div></div>

Specialist Cybersecurity

ISS INTERNATIONAL SpA

<div>
 <strong>
  ISS International S.p.A. is looking for an IT/OT Cyber Security Lead for an onshore Oil &amp; Gas project in Algeria, within a high-standard industrial environment.
  <br/>
  <br/>
 </strong>
 <strong>
  Job Description
 </strong>
 The role involves acting as the Cyber Security focal point for industrial control systems across operational facilities, ensuring protection of OT/ICS environments, compliance with standards and coordination with operations and engineering teams.
 <br/>
 <br/>
 <strong>
  Requirements
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Proven experience in industrial cyber security for Oil &amp; Gas facilities
  </li>
  <li>
   Strong knowledge of OT / ICS / SCADA environments
  </li>
  <li>
   Familiarity with IEC 62443, NIST or equivalent cyber security frameworks
  </li>
  <li>
   Experience with cyber risk assessment and mitigation strategies
  </li>
  <li>
   Ability to interface with operations, IT and engineering teams
  </li>
  <li>
   Fluent English
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Job Details
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Location: Algeria &ndash; Desert Area (camp accommodation)
  </li>
  <li>
   Duration: 1 year, renewable
  </li>
  <li>
   Rotation: 28 days on / 28 days off
  </li>
  <li>
   Working time: 12 hours/day &ndash; 7 days/week
  </li>
  <li>
   Availability: May 2026
   <br/>
   <br/>
  </li>
 </ul>
 Interested professionals are invited to apply.
</div>


IT/OT Cyber Security Lead

ISS International SpA

<div><p><b>ISS International S.p.A. is looking for an IT/OT Cyber Security Lead for an onshore Oil &amp; Gas project in Algeria, within a high-standard industrial environment.</b></p><h5 class="jobSectionHeader"><b>
Job Description</b></h5><p>
The role involves acting as the Cyber Security focal point for industrial control systems across operational facilities, ensuring protection of OT/ICS environments, compliance with standards and coordination with operations and engineering teams.</p><h5 class="jobSectionHeader"><b>
Requirements</b></h5><ul><li><p>
Proven experience in <b>industrial cyber security for Oil &amp; Gas facilities</b></p></li><li><p>
Strong knowledge of <b>OT / ICS / SCADA environments</b></p></li><li><p>
Familiarity with <b>IEC 62443, NIST or equivalent cyber security frameworks</b></p></li><li><p>
Experience with <b>cyber risk assessment and mitigation strategies</b></p></li><li><p>
Ability to interface with operations, IT and engineering teams</p></li><li><p><b>
Fluent English</b></p></li></ul><h5 class="jobSectionHeader"><b>
Job Details</b></h5><ul><li><p>
Location: <b>Algeria &ndash; Desert Area (camp accommodation)</b></p></li><li><p>
Duration: <b>1 year, renewable</b></p></li><li><p>
Rotation: <b>28 days on / 28 days off</b></p></li><li><p>
Working time: <b>12 hours/day &ndash; 7 days/week</b></p></li><li><p>
Availability: <b>May 2026</b></p></li></ul><p>
Interested professionals are invited to apply.</p></div><p></p>

Search 10000+ Cyber security specialist jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 cyber security specialist jobs Near Me

Cyber Security Research Specialist

Global Cyber Security Governance Specialist

Senior Cyber Security Compliance Specialist

Cyber Security Engineer (m/f/x)

Specialist Cybersecurity

IT/OT Cyber Security Lead

IT/OT Cyber Security Lead