Job Description
Dubai Electricity & Water Authority DEWA is currently seeking to hire an Analyst - OT Security Risk Management.
Plan, executive and lead ongoing operational (routine) security risk assessments for managed OT environments in order to maintain compliance with applicable policies and standards. Provide escalated support for incident analysis and management requests from OT Cyber Security Operations Center (CSOC).Undertake remediation activities providing targeted solutions to mitigate security risks to support implementation of OT security strategy and established controls requirements.
Duties and Responsibilities
Your main responsibilities in this role include the following:
Threat Management- Supervise the technical analysis of activities related to escalated incidents by security operation center(SOC) to determine risk.
Technical Vulnerability Assessment: Suoervise technical security vulnerability assessments and related system inspections, as required. Supervise evaluation of OT systems involving software, hardware, configuration data and propose changes to ensure assessed security posture is in compliance with OT security policies and standards.
Operational risk management: Provide technical input and support for escalated incidents from OT CSOC. Accountable for maintaining situational awareness of security vulnerabilities and or/ risks relating to all managed OT environments, developing and implementing risk mitigation plans in alignment with overall security strategy and architecture. Maintain technical vulnerability risk register and effectively communicate appropriate technical information with relevant stakeholders
Job Requirements
Bachelors Degree in Computer Science/ Information Security or equivalent with relevant experience in similar field.
Demonstrable experience with assessing and implementing technical controls covering leading threat intelligence management frameworks, protocols (TAXII/STIX,etc.), SIEM, etc.
Security Certification, e.g. CISSP, CISM, GICSP and ISO/IEC standards e.g. ISO27001; Proven expertise in Information Security Analysis & Forensics (SANS certification preferred)
Good understanding and experience with Networking, TCP/IP, firewall and IPS configuration, and Windows servers;
Proven ability to manage and support crisis situations.
Excellent communication skills (written and verbal), interpersonal and the ability to convey security and risk-related concepts to technical and non-technical audiences.
Job Details
Company/Organization: Dubai Electricity & Water Authority DEWA
Employment Type: Full-time
Job Functions: Information Technology, Engineering
Job Location: Dubai, United Arab Emirates
Application Deadline: N/A
