▷ (04/11/2025) Head - IT & Cybersecurity

Job Description Responsibilities: Strategic Leadership: - Develop and communicate a comprehensive information and operational technology security strategy tailored to address the specific vulnerabilities and threats identified within the organization. - Establish clear security objectives and key performance indicators (KPIs) to measure progress and effectiveness in improving the security posture, including both IT and OT environments. Immediate Risk Assessment and Mitigation: - Conduct a thorough risk assessment to identify and evaluate the current security threats and vulnerabilities across both IT and OT systems. - Prioritize and implement immediate actions to mitigate critical risks and vulnerabilities, leveraging both in-house resources and external expertise as needed, with a strong emphasis on securing OT environments. Policy and Compliance Overhaul: - Review and revamp existing security policies and procedures to align with industry best practices and regulatory requirements, ensuring they encompass both IT and OT security considerations. - Develop a robust compliance framework to ensure ongoing adherence to security standards and legal obligations, including regular audits and reviews of OT systems. Incident Response and Recovery Enhancement: - Establish and maintain an enhanced incident response plan with clear roles, responsibilities, and communication protocols for handling security breaches in both IT and OT domains. - Lead efforts to investigate past breaches, understand root causes, and implement measures to prevent recurrence, particularly focusing on vulnerabilities specific to OT systems. Security Awareness and Training: - Implement a comprehensive security awareness and training program for all employees, including those involved with OT systems, to foster a culture of security consciousness. - Conduct regular training sessions and simulations to prepare staff for potential security incidents and ensure they understand their role in safeguarding both IT and OT environments. Infrastructure and Technology Upgrades: - Evaluate and upgrade existing IT and OT infrastructure and security technologies to address identified weaknesses and enhance overall security defenses. - Implement advanced security measures such as multi-factor authentication, intrusion detection systems, and data encryption, ensuring they are adapted for OT systems where applicable. Collaborative Security Culture: - Foster collaboration across departments to integrate security considerations into all business processes and decision-making, with a focus on bridging IT and OT security practices. - Engage with stakeholders at all levels to ensure buy-in and support for security initiatives and changes, emphasizing the importance of OT security. Continuous Monitoring and Improvement: - Establish a continuous monitoring program to detect and respond to security threats in real-time, covering both IT and OT systems. - Regularly review and update security strategies and measures based on evolving threats and technological advancements, ensuring OT systems are included. Vendor and Third-Party Security Management: - Assess and manage the security posture of third-party vendors and partners to ensure they meet the organizations security standards, including those related to OT. - Establish contracts and SLAs that enforce security requirements and facilitate regular security assessments of third-party interactions, particularly those involving OT systems.