Cybersecurity Specialist

Overview

This role is responsible for leading and managing Gulf Drilling International's information security IT operations, network infrastructure, and Operational Technology (OT) environments. Key responsibilities include ensuring confidentiality, integrity, and availability of IT and industrial systems (IACS), along with overseeing IT security operations, vulnerability management, incident response, and compliance aligned with ISO 27001 and industrial cybersecurity standards such as ISA/IEC 62443. The position also provides technical leadership for IT network administration and operational functions to secure and optimize technology services throughout the organization.

Key Responsibilities

• Manage the secure design, implementation, and continuous enhancement of network infrastructure to ensure reliable, high-performance, and secure connectivity across corporate and operational settings.
• Oversee network administration activities involving routers, switches, firewalls, VPNs, wireless networks, and communication systems, complying with security policies and operational needs.
• Ensure effective network security controls including segmentation, access controls, monitoring, and logging to safeguard organizational assets and regulatory compliance.
• Lead and supervise identity and access management, enforcing secure authentication, authorization, and least privilege principles across network and security environments.
• Coordinate the configuration and maintenance of security platforms such as firewalls, VPNs, NAC, intrusion detection/prevention systems, aligned with industry standards.
• Manage incident response processes by monitoring, analyzing, escalating, and resolving IT and security incidents with comprehensive documentation and root cause analysis.
• Direct vulnerability management programs by identifying, assessing, prioritizing, and remediating vulnerabilities across IT and OT systems, including patch management and configuration hardening.
• Ensure compliance with information security policies, ISO 27001 ISMS requirements, industrial cybersecurity standards, and conduct audits, risk assessments, and remediation tracking.
• Maintain effective communication and collaboration with internal teams including IT, Operations, Finance, Audit, HR, and external vendors such as service providers and technology suppliers.
• Exercise professional judgment on cybersecurity risks, overseeing incident management, security control implementations, and recommending improvements to uphold organizational security posture.

Qualifications and Experience

• Bachelor's degree in Information Technology, Computer Science, or a related discipline from an internationally recognized university or relevant equivalent experience.
• Professional certifications preferred: CISSP, CISM, CEH, Security+, GSEC, GIAC or equivalents.
• In-depth knowledge of information security and industrial cybersecurity standards (ISO/IEC 27001, ISA/IEC 62443).
• Experience with Operational Technology (OT), Industrial Automation and Control Systems (IACS), and IT/OT integration principles is advantageous.
• Minimum of 8 years of relevant experience in IT security or cybersecurity encompassing network security, vulnerability management, and incident response.

Technical Skills

• Comprehensive understanding of network security architectures, including firewalls, VPN, NAC, SIEM, endpoint security, and network monitoring platforms.
• Proficiency in incident response, vulnerability assessment, threat mitigation, and security operations management.
• Familiarity with ISMS implementation, cybersecurity compliance, and audit preparation.
• Ability to perform security risk analysis, incident investigations, and develop mitigation strategies.
• Strong leadership and stakeholder engagement skills to guide technical teams and collaborate cross-functionally.

Work Environment and Authority

This position operates within a security-sensitive environment supporting the organization's ISMS, cybersecurity strategy, and critical infrastructure. It commands authoritative judgment in cybersecurity risk assessment, incident management, policy enforcement, and escalation of major security issues to IT management for strategic resolutions. The specialist stays informed on emerging threats, regulatory changes, and industrial security standards to maintain organizational resilience.