Cybersecurity Specialist

About the role

The Cybersecurity Specialist will lead the design, implementation, and governance of YASREF's information security program. You will protect the organization’s IT and OT environments from cyber threats while ensuring compliance with internal and external mandates.

Key responsibilities

• Define, communicate, and control a robust cybersecurity governance framework.
• Develop and update security policies, procedures, and guidelines to meet ISO 27001, ISA 99/IEC 62443, and other compliance requirements.
• Conduct risk assessments following ISO 31000 and corporate ERM methodology.
• Perform internal and vendor security audits, maintain audit evidence, and close findings.
• Align IT and OT controls with NIST Cybersecurity Framework, NIST SP 800‑53, and NIST SP 800‑82.
• Research, recommend, and implement technology controls to detect, prevent, and respond to security incidents.
• Establish a data classification and privacy framework and support business units in data handling.

Required profile

• Proven experience in information security governance and risk management.
• Strong knowledge of ISO 27001, ISO 31000, NIST CSF, and ISA/IEC 62443 standards.
• Hands‑on experience with security audits, vulnerability assessments, and incident response.
• Ability to work with both IT and OT environments and coordinate with internal stakeholders.

Required skills

• ISO 27001
• ISO 31000
• NIST Cybersecurity Framework (CSF)
• NIST SP 800‑53
• NIST SP 800‑82
• ISA 99 / IEC 62443
• SANS Top 20 Critical Controls
• Risk assessment and management
• Security auditing
• OT security controls
• Data classification and privacy frameworks

What we offer

• Opportunity to shape cybersecurity strategy for a leading refinery.
• Collaborative environment with cross‑functional teams.
• Professional development in advanced security standards.