Cyber Security Lead

Role Summary:

Responsible for defining and implementing the organization's cybersecurity strategy, architecture, policies, and security controls across IT infrastructure, business applications, cloud environments, and project sites. Lead security operations, threat monitoring, incident response, vulnerability management, and remediation activities to protect organizational information assets. Ensuring security is integrated into IT projects, including SAP, Microsoft 365, and EPC project environments. Conduct IT security risk assessments, enforce endpoint and access security, and ensure compliance with ISO/IEC 27001, internal security policies, and client-specific contractual requirements. Coordinate security audits, manage cybersecurity risks, maintain documentation, and drive continuous improvement in the organization's overall security posture.

Responsibilities:

• Define and maintain cybersecurity architecture, aligned to business applications and infrastructure footprint
• Enforce baseline security policies for endpoints, networks, cloud environments, and privileged access
• Ensure security is embedded in all IT projects, including SAP, collaboration tools and site mobilizations
• Implement and manage enterprise-wide threat detection and response systems
• Lead triage, containment and resolution for all cybersecurity incidents and breaches
• Conduct post-incident reviews and drive remediation actions
• Maintain incident logs and share learnings with relevant stakeholders
• Oversee endpoint protection measures across laptops, desktops, and mobile devices
• Monitor and enhance security controls for Microsoft 365, cloud storage, and email gateways
• Conduct vulnerability scans and hardening for critical systems
• Conduct periodic IT security risk assessments across corporate and project environments
• Ensure compliance with internal standards, ISO 27001 and client-specific security clauses in EPC contracts
• Support internal and external audits; maintain all required documentation and remediation logs