Senior Cyber Security Engineer

Our client, an oil and gas operator, is currently recruiting for a Senior Cyber Security Engineer. Based in Aberdeen, the role is on a long-term contract basis and offers hybrid working.

1. Implement Critical Requirements: Ensure compliance with CR GR SSI 001, CR GR SSI 023, GS EP INS 135, and L2-OPS-17-001 across all assets.
2. Incident Management: Review, investigate, mitigate, and resolve cybersecurity incidents, anomalies, and threats promptly.
3. Cyber Security Road Map: Assist in delivering key activities and act as a delegate for the Lead Cyber Security Engineer during absences.
4. Risk Analysis: Participate in asset cyber risk analysis and develop procedures and documentation for cybersecurity management.
5. Compliance: Ensure stakeholders comply with cybersecurity requirements and carry out UK government cybersecurity self-assessment reports.
6. Solution Support: Roll out HQ security solutions, including administration and troubleshooting.
7. Audits: Conduct site audits, recommend improvements, and track actions to completion.
8. Vulnerability Management: Manage the industrial cybersecurity vulnerability process and ensure timely patching.
9. Training: Develop and maintain industrial cybersecurity training materials and competence procedures.
10. Emergency Response: Create and maintain cyber emergency and incident response plans.
11. Project Involvement: Ensure cybersecurity requirements are captured in new projects and modifications.
12. Culture Promotion: Promote a positive cybersecurity culture and participate in annual events and presentations.
13. Innovation: Support the design and rollout of safer architecture solutions and stay updated on emerging technologies.
14. Reporting: Produce reports to monitor cybersecurity progress and communicate findings to stakeholders.
15. Vendor Coordination: Coordinate with third parties and vendors during cybersecurity incidents and carry out post-incident investigations.

1. Education: Relevant degree in Instrumentation and Controls, Computer Science, or Cyber Security.
2. Experience: Prior relevant industry experience.
3. Knowledge: Understanding of offshore operations, project management, and UK industry regulations.
4. Expertise: In-depth understanding of IEC/ISA 62443 and OG-86.
5. Management Skills: Experience managing contractors, vendors, and service providers.
6. Communication: Effective communicator, both written and verbal.
7. Relationship Building: Strong relationship-building skills at all levels - internally and externally.