IT Lead – Cyber Security

IT Lead – Cyber Security

Petrofac is a leading international service provider to the energy industry, with a diverse client portfolio including many of the world’s leading energy companies.

We design, build, manage and maintain infrastructure for our clients. We recruit, reward, and develop our people based on merit regardless of race, nationality, religion, gender, age, sexual orientation, marital status, or disability. We value our people and treat everyone who works for or with Petrofac fairly and without discrimination.

The world is re-thinking its energy supply and energy security needs, planning for a phased transition to alternative energy sources. We are here to help our clients meet these evolving energy needs.

This is an exciting time to join us on this journey.

We support flexible working requests and have adopted a hybrid approach for most of our office-based roles. We ask employees to be present in the office at least three days per week.

Are you ready to bring the right energy to Petrofac and help us deliver a better future for everyone?

JOB TITLE: IT LEAD – CYBER SECURITY

KEY RESPONSIBILITIES:

• Privilege Access Management
• Develop and run security testing framework.
• Develop and run secure configuration management framework.
• Discover and remediate security vulnerability and configuration issues in on premise and cloud infrastructure.
• Perform firewall rule base reviews and other secure configuration reviews.
• Manage and increase the effectiveness and efficiency of the Petrofac SOC, through red teaming and penetration testing.
• Develop and Report metrics on Internal and External Cyber Posture.
• Continuously review security controls and ensure efficacy of prevention and detective solution implemented in the organization.
• Review Remote Access Privileges.
• Manage Privileged Machine and Human Identities.
• Experience in handling Cyber Security Incidents
• Manage supply chain cyber security risk by building and running an effective Third-Party Security management framework.
• Understanding of Roles and Access Management on Azure.
• Train and mentor junior resources.
• The post holder is expected to adhere to the 9 Life-Saving Rules and the Petrofac Values and Behaviors.
• Ensure the operations are running efficiently and there is no budget over creep.
• Ability to come up with innovative solutions to complex problems.

ESSENTIAL QUALIFICATIONS AND SKILLS:

• Degree in Information Management/Computer Science or relevant work experience
• 10+ years’ experience in information security
• Any Industry certification(s) such as CISSP, CISM OSCP is desired.
• Demonstrated ability to work in a complex environment.
• Good technical and trouble-shooting ability
• Ability to work in a high stress environment.
• Ability to interact with staff, peers, and customers on a technical and professional level.
• Experience of working in large enterprise Security Operations team with proven ability to work collaboratively with other departments to resolve complex issues with innovative solutions.
• Hand on experience of working on a Privilege access management solution.
• Hands on experience on performing red team exercise, penetration testing, and application security testing.
• Experience on building and running effective security testing program.
• Experience of running Third Party Security Management programs.
• Working knowledge of Infrastructure security and hardening, Ethical Hacking or Penetration Testing
• Working knowledge of Identity and Access Management
• Experience of deploying large and complex security projects in enterprise environment.