About This Role
This leadership role provides strategic direction and oversight for all cyber security initiatives across IT and OT environments. The Director establishes and leads a comprehensive information security program to protect all assets against current and future threats, while identifying and mitigating risks to meet compliance and industry requirements. The position serves as the key liaison for all information security communications, coordinating internal staff, external resources, and agencies.
Responsibilities
- Provide leadership and oversight in the strategic planning, execution, and assessment of all cyber security strategies, policies, procedures, and guiding practices
- Establish and lead a comprehensive EGA-wide information security program to ensure all IT and OT assets are adequately protected
- Identify, direct, coordinate, evaluate, and report on information security risks
- Serve as the key liaison and focal point for all information security communications and initiatives
- Coordinate internal staff, external resources, national and international agencies, and related third parties
- Work closely with automation control system leads and OT cybersecurity champions to establish security controls for the OT environment
- Secure the integration of IT and OT networks/environments while maintaining segmentation to prevent lateral movement to critical OT systems
- Oversee the consolidation and recommend the Cyber Security budget for both IT and OT environments
- Monitor financial performance against the budget
- Manage the development of staff training and awareness programs on all enterprise IT and OT security best practices
- Provide support, training, and guidance to EGA management and staff on security management policies, standards, and procedures
- Monitor and audit implementation to ensure policies are adhered to
- Establish effective relationships with plant managers, plant control system engineers, plant instrumentation engineers, and other OT teams
- Develop and maintain effective business relationships with all relevant internal departments and external entities
- Promptly attend to all critical issues to ensure required services are delivered effectively
- Manage the effective achievement of departmental objectives through leadership of the Cyber Security department
- Set individual objectives, recruit qualified staff, manage performance, develop and motivate staff, and provide feedback and appraisals
- Ensure compliance with all relevant safety, quality, and environmental management policies, procedures, and controls
- Ensure the implementation of security controls in the OT environment without compromising performance, safety, or leading to disruption
- Operate within defined policies and objectives under general direction
