IT Cybersecurity
Core
Design, implement, and maintain security risk management frameworks aligned with ISO 27001, NIST, and ISA 62443; lead GRC automation and vulnerability management to protect critical infrastructure.
Role type
Senior IC Cybersecurity Engineer (GRC & Vulnerability Management)
Builds
Security governance frameworks, automated compliance workflows, vulnerability scanning pipelines, and security testing dashboards
Domain
Industrial automation, oil and gas, and critical infrastructure
Required skills
GRC frameworks (ISO 27001, NIST, ISA 62443), vulnerability management tools (Nessus, Qualys), application security testing (SAST, DAST), SIEM/IPS/IDS, cloud platforms (AWS, Azure, GCP), security automation, policy writing
Preferred skills
CEH, CYSA+, ISO 27001 LA, CISA, CompTIA Security+, secure coding practices, threat modeling
Technologies
Archer, OneTrust, LogicGate, ServiceNow GRC, Nessus, Qualys, Burp Suite, OWASP ZAP, Metasploit, Wireshark, Rapid7, OpenVAS
Responsibilities
Design and maintain security risk management frameworks; lead GRC automation efforts; manage automated vulnerability scanning and penetration testing; implement and manage GRC platforms; collaborate with development teams on secure software design; provide security awareness training and conduct code reviews
Seniority
Mid-Senior, hands-on IC
