_{03rd June, 2025}

Position Overview:

We are seeking a strategic and results-driven Chief Information Security Officer (CISO) to lead our information security program in the energy sector's high-stakes, high-resilience environment. The CISO will be responsible for developing and implementing a comprehensive cybersecurity strategy to protect our critical infrastructure, operational technology (OT), and information assets. The ideal candidate will have deep experience in both IT and OT security within the energy industry and a strong understanding of regulatory and compliance frameworks.

Key Responsibilities:

• Develop, implement, and maintain a company-wide information security strategy aligned with business goals and evolving threat landscapes.
• Oversee the protection of critical infrastructure, including SCADA systems and other industrial control systems (ICS), ensuring the security of both IT and OT environments.
• Lead incident response efforts and business continuity planning for cyber-related events.
• Conduct risk assessments, vulnerability analyses, and penetration testing; manage mitigation strategies accordingly.
• Ensure compliance with industry standards and regulations (e.g., NERC CIP, FERC, ISO/IEC 27001, DOE guidelines).
• Collaborate with executive leadership, engineering, IT, and legal teams to manage security risks and integrate cybersecurity into business operations.
• Establish and enforce security policies, protocols, and procedures.
• Develop and deliver security awareness and training programs across the organisation.
• Represent the organisation in industry forums, regulatory audits, and with external partners or government agencies.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (Master’s preferred).
• Relevant certifications such as CISSP, CISM, GIAC, or CISA.
• Specialised training or certification in industrial control systems (e.g., GICSP) is a plus.

• Minimum of 10 years of experience in cybersecurity, with at least 5 years in a senior leadership role.
• Proven experience managing cybersecurity within the energy or critical infrastructure sector.
• Deep understanding of OT environments, SCADA systems, and emerging cyber threats specific to the energy industry.
• Experience working with federal and state regulatory agencies and managing compliance efforts.