Cybersecurity Specialist

About the role

The Cybersecurity Specialist will define, communicate and control a robust information security and cybersecurity governance program for YASREF. This role guides the implementation of security practices across IT and OT environments, defending systems, networks and data from malicious attacks.

Key responsibilities

• Develop and update information security guidelines, procedures and frameworks to meet ISO 27001, ISA 99/IEC 62443 and NIST CSF requirements.
• Conduct risk assessments following ISO 31000 and perform internal technical and process risk assessments regularly.
• Audit and monitor the performance of OT & IT controls, identify gaps and drive remediation to prevent security incidents.
• Research, recommend and implement technology controls to detect, respond to and recover from cyber‑attacks.
• Lead internal and vendor security audits, maintain audit evidence and ensure closure of findings.
• Design and deliver security awareness training, phishing simulations and continuous education for all users.

Required profile

• Bachelor’s degree in Computer Science, IT, Computer Engineering or equivalent.
• Relevant cybersecurity certification (e.g., CISSP, CISM, ISO 27001 Lead Implementer).
• Minimum 15 years of experience in information security, preferably in industrial or energy sectors.

Required skills

• ISO 27001 implementation and auditing.
• ISA 99 / IEC 62443 standards for OT security.
• NIST Cybersecurity Framework, NIST SP 800‑53 and NIST SP 800‑82.
• SANS Top 20 Critical Controls.
• Risk assessment methodologies (ISO 31000).
• Industrial Control Systems (ICS) and Electrical Automation Systems security.