Cybersecurity Lead

About the role

The Cybersecurity Lead is responsible for protecting the organisation's information assets, operational technology interfaces, digital platforms and data. Reporting to the CTO, the role provides independent oversight of cyber risk, governance and compliance while ensuring safe, reliable and efficient business outcomes.

Key responsibilities

• Define and execute the enterprise information and cybersecurity strategy in line with operational reliability, safety and business goals.
• Establish and maintain cybersecurity policies, standards and procedures aligned with global best practices and regulatory expectations.
• Lead enterprise cyber risk management, maintain the risk register and integrate with broader enterprise risk processes.
• Oversee outsourced Security Operations Centre (SOC) services and coordinate incident response activities.
• Manage vulnerability management and penetration testing programmes, ensuring timely remediation.
• Monitor emerging threats and translate intelligence into practical control improvements.
• Oversee Identity and Access Management (IAM), privileged access management and promote zero‑trust principles.
• Provide security input into system architecture and digital transformation initiatives.

Required profile

• Proven experience leading cybersecurity functions in a technology‑focused environment.
• Strong understanding of regulatory and data protection requirements, especially in oil & gas or similar high‑risk sectors.
• Demonstrated ability to work cross‑functionally with technology operations, digital innovation and project management teams.
• Excellent analytical, communication and stakeholder‑management skills.

Required skills

• Identity and Access Management (IAM)
• Privileged Access Management
• Zero‑Trust security principles
• Vulnerability Management
• Penetration Testing
• Security Operations Centre (SOC) oversight
• Incident Response
• Threat Intelligence
• Cloud and Infrastructure Security