Charterhouse is working with a long-standing client in the oil and gas industry, who is currently looking for a IT Cyber Security Team Lead to join their team on a permanent basis.
This is a great opportunity to join a multi-cultural organisation, who values and supports their employees across all areas of the business.
About the role
Dual reporting to the Information Technology (IT) Manager and Chief Information Security Officer (CISO), the successful candidate will assume a dual role. As a main responsibility, the IT Cyber Security Team Lead will lead and participate alongside the Cyber Security Engineers in the execution and delivery of all projects and assignments with a day-to-day focus on operations. In addition, they will be responsible for all aspects of business development and operations, to successfully expand the Cyber Security assignments portfolio, and ensure overall operational excellence.
About you
A degree in Engineering, Computer Science, Information Security, Information Management Systems, or a related field is essential, with preference for certification as a Certified Information Systems Security Professional (CISSP) and additional qualifications such as ISO 27001 Lead Implementer or Lead Auditor, along with Prince II or PMP certification. Candidates should possess 5-10+ years of experience in Information Security implementation, management, monitoring, and audit, demonstrating a strong understanding of security controls across organisations. Experience in coordinating engineering teams and working with ICS, SCADA, and Operational Technologies is required, with Oil and Gas industry experience preferred.
Knowledge of NIST, IEC 62443, and ISO 27001 cybersecurity frameworks is advantageous. Candidates should have extensive IT/Networking experience in areas such as penetration testing, application security, threat intelligence, and security architecture, as well as experience in Security Operations Centres or Computer Emergency Response Teams. Strong communication skills are necessary, alongside a solid understanding of current security principles, operations technologies, and cyber threat tactics. Proficiency in scripting languages like PowerShell or Python is also required.