Cybersecurity Specialist – Information Security Governance

About the role

The Cybersecurity Specialist will define, communicate and control a robust information security and cybersecurity governance program for YASREF. The role ensures protection of IT and OT assets, data and industrial control systems against malicious attacks while aligning with internal and external mandates.

Key responsibilities

• Develop and maintain information security governance policies and procedures aligned with ISO 27001, NIST CSF and IEC 62443.
• Conduct risk assessments, internal audits and vendor security reviews to ensure compliance with corporate and regulatory requirements.
• Lead the design and implementation of OT/IT security controls, data classification and privacy frameworks across the organization.
• Provide security awareness training, phishing simulations and continuous improvement of the security posture.

Required profile

• Bachelor’s degree in Computer Science, IT, Computer Engineering or equivalent.
• Minimum 15 years of relevant experience in information security, risk management and industrial control system protection.
• Relevant cybersecurity certifications (e.g., CISSP, CISM, ISO 27001 Lead Implementer).

Required skills

• Deep knowledge of ISO 27001, NIST Cybersecurity Framework, IEC 62443 and related standards.
• Experience with risk assessment methodologies such as ISO 31000 and enterprise risk management.