Senior IT Security, Risk Management & Control Technical at Nigeria LNG

Tasks

• Provide Information Security services by review of new technologies, definition of security configuration, performance of vulnerability assessments, response to and resolution of security incidents, and communication of information technology security risk, thus ensuring that the organization maintains prescribed Information Technology standards.
• Lead investigations on information security incidents in all NLNG IT Environments including NLNG Plant Control Domain (PCD), follow-up on learning’s from incidents and report findings to the NLNG IT Security Incident Management Committee
• Lead the review, assessment and sign-off security requirements for all IT projects and major changes in existing IT environments. Participate in the IT Architecture Review Board to ensure that IT Solutions delivered with Projects are in line with the Reference Architectures and are fit for use /fit for purpose. Provide IT Security assurance on assigned IT projects and conduct Business Impact Analysis (BIA) for those assigned projects
• Adopt and apply IT Security Standards for  security assessments and validation in  the processes of  database design, servers, desktop, network, application development and other IT systems  to ensure that these solutions security configurations complies with these standards.
• Adopt and apply the standard IT Risk Management standards, tools and techniques to accurately manage all IT Risks that cover the whole threat and vulnerability landscape of NLNG IT Environment and develop IT Risk Visuals for Management team review.
• Coordinate the conduct of Business Impact Analysis (BIA) for all  IT as agreed in the BIA for IT Services. Maintain the IT disaster recovery services. Implement the necessary IT controls in NLNG IT Environments including PCD that will guarantee the Confidentiality, Integrity and Availability of NLNG Data in line with the NLNG Management commitment plan in support of corporate NLNG Business continuity
• Participate in all PCD Systems project security assessments, Cyber Security control activities and serve as an interface for the alignment of the IT Security policies/standards with the Process Control Domain (PCD) Security policies/standards.
• Implement and conducts periodic vulnerability assessment of Company assets, existing IT systems and new systems before go-live. Participate in design of information system contingency plans that maintain appropriate levels of protection and meet time requirements for minimizing disruptions to operation
• Manage access controls for IT systems by agreeing, documenting, monitoring, reporting, enforcing appropriate restriction and preventing abuse of user access control for IT systems within the company's computing environment. Provide expert technical advice and guidance to management and other technical specialists on critical information security issues.

Requirements

• A University Degree in Engineering, Computer Science, Information Management or related field; a professional certification, such as a CISSP, CRISC or other Information Security credentials, will be advantage.
• 5 to 7 years post graduate experience, out of which 2 years should have been spent in a similar position preferably an Oil & Gas company.