Cyber Security Manager

Oman Investment Authority

1. Cyber Security Operations

• Manage the Cyber Security Operations Center (CSOC) for continuous monitoring and threat detection.
• Oversee SIEM, SOAR, EDR, MFA, and other security technologies.
• Ensure timely incident detection, escalation, containment, and recovery.
• Lead cyber incident investigations and forensic activities.
• Maintain cybersecurity dashboards, alerts, and KPI reporting.

2. OT / SCADA Security

• Protect SCADA, DCS, ICS, and OT networks from cyber threats.
• Implement network segmentation, secure remote access, and industrial firewalls.
• Ensure patching, firmware management, and hardening of OT assets.
• Conduct OT vulnerability assessments and security reviews.

3. Governance, Risk & Compliance

• Ensure compliance with applicable cybersecurity laws, regulations, and internal policies.
• Conduct cybersecurity risk assessments across IT and OT assets.
• Maintain risk registers and remediation plans.
• Lead internal and external cybersecurity audits.
• Coordinate regulatory submissions and evidence requirements.

4. Asset Security Management

• Maintain inventory of cybersecurity-related IT and OT assets.
• Ensure asset classification based on criticality and risk.
• Manage secure lifecycle of assets from acquisition to disposal.
• Ensure secure disposal aligned with environmental standards.

5. Projects & Vendor Management

• Lead cybersecurity projects from planning through implementation.
• Manage project budgets, procurement, and vendor contracts.
• Evaluate third-party cybersecurity risks.
• Ensure vendors comply with OETC security standards.

6. Business Continuity & Resilience

• Develop and maintain cyber incident response plans.
• Support disaster recovery and backup restoration testing.
• Lead cyber resilience exercises and readiness programs.
• Minimize operational downtime caused by cyber incidents.

7. Awareness & Leadership

• Lead and develop cybersecurity operations teams.
• Identify skill gaps and implement training plans.
• Deliver cybersecurity awareness programs across the business.
• Promote a culture of cyber safety and accountability.

8. QHSE Responsibilities

• Ensure compliance with OETC QHSE policies.
• Identify cyber risks that may impact safety or operations.
• Coordinate with HSE teams on industrial cybersecurity risks.