Director of Cyber Security

Job Purpose The job holder is responsible for provide strategic leadership, governance, and oversight for the organization’s cybersecurity posture by managing and integrating the Cybersecurity GRC, Cybersecurity Operations (OT & IT), and Cybersecurity Architecture & Project functions. The role ensures the protection of information assets, operational technologies, and digital infrastructure against evolving cyber threats. Key Roles and Responsibilities • Develop Cybersecurity policies, procedures, and controls covering all areas of assigned Cybersecurity activity and provide continuous improvement recommendations.‎ • Develop Cybersecurity strategic and operational plans, ensuring alignment with WTCO’s strategy, vision, mission, and corporate objectives. • Develop a Cybersecurity budget and ensure potential areas of cost reduction or performance improvement opportunities are capitalized upon. • Fulfill ESG responsibilities and requirements in line with the strategy and ESG-related initiatives. • Set Cybersecurity KPIs and monitor progress and development toward WTCO strategic objectives. Identify the management needs of competencies and talents and provide recommendations with regard to human resources decisions. • Develop all Cybersecurity reports in a timely and accurate manner while ensuring meeting the requirements, policies, and quality standards. • Delegate duties, responsibilities, and authorities to appropriate team members within the business in case of absence. • Identify opportunities for continuous improvement of Cybersecurity’s systems and practices taking into consideration leading practices, cost reduction, and productivity improvement. • Ensure that all work is carried out efficiently, in line with the annual business plans, goals, policies, processes, procedures, and instructions. • Ensures compliance with all applicable laws, rules, regulations, and standards within WTCO and related functions such as but not limited to (HC, HSSE, Risk, Cybersecurity, etc..). • Escalate problems to ensure case/issue is closed efficiently and in a timely manner. • Develop the organization’s overarching cybersecurity strategy by integrating GRC, Operations (OT & IT), and Architecture functions to establish a unified, enterprise-wide protection framework. • Oversee the formulation, implementation, and continuous improvement of cybersecurity policies, standards, and governance models to ensure compliance with national (e.g., NCA) and international regulations. • Approve strategic and operational plans from each cybersecurity function to ensure budget alignment, resource allocation efficiency, and strategic goal achievement. • Direct the creation of enterprise-wide cybersecurity risk management programs to identify, assess, and mitigate security risks across all digital and operational environments. • Lead the integration of security-by-design and Zero Trust Architecture principles into enterprise technology deployments, digital transformation initiatives, and critical infrastructure upgrades. • Establish governance frameworks for AI/ML systems, emerging technologies, and OT/IT convergence to ensure ethical use, data integrity, and protection from adversarial attacks. • Guide the design, validation, and implementation of secure architectures, cloud integrations, and network segmentation to strengthen defense-in-depth capabilities. • Supervise the development and operation of the Security Operations Center (SOC) to ensure real-time detection, incident containment, and response across OT and IT domains. • Champion enterprise-wide cybersecurity awareness and training programs to foster a culture of security ownership, accountability, and continuous learning. • Oversee compliance with privacy, data protection, and ESG-related security requirements, ensuring alignment with organizational sustainability and governance objectives. • Manage large-scale cyber incident investigations, root cause analysis, and post-incident governance to institutionalize lessons learned and prevent recurrence. • Approve vendor and third-party cybersecurity risk assessment processes to safeguard supply chain ecosystems and enforce contractual compliance. • Review and endorse KPIs, KRIs, and cybersecurity maturity indicators for executive reporting and strategic decision-making. • Align cybersecurity priorities with business continuity and disaster recovery strategies, ensuring resilience against ransomware, industrial sabotage, and operational disruptions. • Represent the organization in cybersecurity regulatory and industry forums, influencing policy development and ensuring early adoption of best practices. • Coordinate the collaboration between cybersecurity, legal, procurement, and business units to streamline risk acceptance, impact assessments, and audit readiness. • Drive the evaluation and adoption of advanced detection, monitoring, and analytics technologies to enhance threat intelligence, situational awareness, and proactive defense. • Ensure integration of cybersecurity metrics into enterprise performance dashboards, enabling real-time visibility of risk posture and mitigation progress. Job Requirements • Bachelors in Computer Science or Information Technology • Master’s in Cybersecurity or Management Key Communications • Internal Stakeholders • All Departments External Stakeholders • Consultants/Contractors • Vendors/Suppliers/Service providers • Government authorities and entities Disclaimer The above job description is meant to describe the general nature and level of work being performed; it is not intended to be constructed as an exhaustive list of all responsibilities, duties, and skills required for the position. Accordingly, there is no way this Job Description states or implies that these are the only duties to be performed by the employee in this position. Employees will be required to follow any other job-related instructions and to perform other job-related duties. Thank you For Choosing WTCO Show more Show less

Bachelors in Computer Science or Information Technology. Master’s in Cybersecurity or Management.

Develop Cybersecurity policies, procedures, and controls; develop strategic and operational plans; develop a Cybersecurity budget; fulfill ESG responsibilities; set KPIs; develop reports; delegate duties; identify improvement opportunities; ensure compliance; develop overarching cybersecurity strategy; oversee governance models and standards; approve plans and budgets; lead enterprise-wide risk management programs; integrate security-by-design and Zero Trust; establish governance for AI/ML and OT/IT convergence; design secure architectures, cloud integrations, and network segmentation; supervise SOC operations; promote security awareness and training; oversee privacy and ESG security requirements; manage cyber incident investigations; approve vendor risk assessment processes; review KPIs/KRIs; align with business continuity/DR; represent organization in regulatory forums; coordinate cross-functional risk acceptance and audits; drive adoption of advanced detection and analytics technologies; integrate cybersecurity metrics into enterprise dashboards.