Cyber Security Manager

About ENGIEENGIE group is a global reference in low-carbon energy and services. Together with our 96,000 employees, our customers, partners and stakeholders, we are committed to accelerate the transition towards a carbon-neutral world, through reduced energy consumption and more environmentally friendly solutions. Inspired by our purpose (“raison d’être”), we reconcile economic performance with a positive impact on people and the planet, building on our key businesses (gas, renewable energy, services) to offer competitive solutions to our customers.Description about the Entity: Head office/ CountryENGIE’s Asia Middle East and Africa (AMEA) region has its office in Dubai. The region has activities in large scale power generation, water desalination, district cooling, energy solutions and renewables including green hydrogen, wind and solar. We act throughout the value chain: strategy, design, engineering, energy-efficient asset construction, digital platforms, operations management, financing syndication and outcome assurance. And, by using globally leading technologies, we create innovative energy and smart solutions that help to make the world a better place.Purpose of the Job:Work as a cyber security expert and a single point of contact to support ENGIE entities in KSA. Ensuring compliance to local regulations and Group compliance requirements on cyber security for protection of business and ICS networks.Reporting Line:Chief Information Security Officer (CISO) AMEACountry Manager - ENGIE KSAKey Accountabilities:Work as a single point of contact for cybers security matters within KSA.Providing comprehensive cyber security assurance and compliance assessment, on all sites within KSA.Implementing necessary controls for ensuring compliance to local and Group ICS cyber security frameworks.Assisting and coordinating internal and external audits/reviews on cyber securityAct as a key role for cyber security incident management process for identification, remediation and response, including coordination with local regulatory bodies and Group.Develop and implement program for cybersecurity training and awareness across the organization.Engagement in infrastructure and application design processes to ensure solutions are secure and compliant to local and Group requirementsLeads the coordination and consolidation of IT risk analysis and managementAdvise the business on data protection regulations and its potential impact on the business.Develop, implement and maintain IT / ICS disaster recovery plan to ensure business continuity across the perimeter in scope.Educational/ Professional Qualifications:Bachelor’s degree, preferably in Computer Science or Information Technology or Cyber Security domain.Internationally recognized certification in cyber security, e.g., CISSP, CISM, CISA.Good knowledge and understanding of local cyber security regulations of KSA.Working Experience:5+ years of prior experience of managing cyber security of an organization, preferably in KSA. Prior experience of ICS/OT security will be an advantage.Good understanding and experience of cybersecurity regulations (NCA) of Saudi Arabia.Working experience in information security governance, IT security and risk management.Experience in designing, documenting and implementing cyber security processes / procedures.Preferably worked in a matrix organization.Language:Conversant with written and oral English & Arabic language.Specific Knowledge/ SkillsCooperation & cross functionality – team working and building relationshipsResults orientationCustomer focusAcceptance of diversityEffective communication skills in English and Arabic.Persuading and influencing.Pays attention to detail.Conducts work while being fully aware of, and complying with, safety and environmental responsibilities.Location/travel: Frequent travel inside KSA.Field: Information Technology / Cyber SecurityPrimary Location: KSA