Senior Engineer, Asset Management (OT Security)

Monitor Industrial Control networks for security threats or unauthorized users. Identifies compromised machines and reports on security measures taken to address threats, analyzes security risks, and develops response procedures. Maintain security tools and servers. Prepare budget for security hardware and software. Key Responsibilities Procedures and Policies Review the cyber security procedures and policies for all ICS systems including third-party systems and advise on the required solutions for protecting critical infrastructures from emerging cyber-attacks. Review and implement Data Classification & Media Handling for OT systems. Servers, Switches-Daily Maintenance Direct and supervise all administration activities related to servers or network devices. Put plans and procedures in place to maintain and upgrade Windows updates/upgrades and the hardware of the servers and networking devices. Manage and administer the patch management activities for respective OT assets & technical review as well as approval of all patches for applicability, impact, and criticality within OT. Ensure periodic review of user accounts of the assets and applications in the ICS and third-party systems. Create, modify, disable, and delete OT systems user accounts. Support overall network operations activity for OT assets and its applications for communications & implementation, management, and support of all network components such as network switches, routers, NMS, etc. Ensure endpoint security is as per ADNOC OT cybersecurity specifications. Analysis and Report Lead the risk assessment process for identifying ICS cyber security gaps. Coordination of External Consultants and Contractors Coordinate and supervise the work of external consultants, contractors, or engineers related to cyber activities. Follow up on their work progress and performance, approve timesheets for manpower allocation and time spent, and present invoices for payment as appropriate. Projects Participation with Vendors Participate in reviewing technical design and Security engineering and provide inputs related to these projects. Ensure proper implementation and participate in acceptance tests on behalf of the mentioned cyber projects. Coordination among ADNOC Refining Departments Coordinate with ADNOC OT Security teams to ensure proper implementation of cyber security for the connectivity between ICS systems and business networks. Coordinate with different departments to ensure integration with each other. Plan And Disaster Readiness Develop/assist the worst-case scenario and mitigation plan for ICS cyber security attacks. Business Continuity Management – Incident Response & Disaster Recovery of OT Assets. Change Management Process Develop a change management process to ensure proper secure implementation of cyber security controls to avoid affecting production when implementing cyber security solutions. Data Backup & Disaster Recovery plan (DRP) Perform daily, monthly, and yearly data and database backups at RR. Backup and restoration shall include the main DCS/SCADA/third-party and package systems. Perform restoration tasks periodically to ensure the validity of the backup and the DRP and that the tapes are kept in a safe place. Qualifications Bachelor's Degree in Engineering or a relevant degree. At least 8 years of experience in the same or a similar role working in the oil and gas industry. #J-18808-Ljbffr