Title: Cyber Security Manager Position: Cyber Security Manager Project: IFMS Project Location: Basra, Iraq Rotation 28/28 rotation Nationality: Open "Belong, Connect, Grow, with KBR! The KBR team of teams delivers future-forward science, technology and engineering solutions and mission-critical services that help governments and companies around the world accomplish their most important objectives, while also helping achieve their sustainability goals. KBR Sustainable Technology Solutions provides holistic and value-added solutions across the entire asset life cycle. These include world-class licensed process technologies, differentiated advisory services, deep technical domain expertise, energy transition solutions, high-end design and engineering capabilities, and smart solutions to optimize planned and operating assets." Professional Summary Experienced Cyber Security Manager with over [10] years of expertise in the oil and gas industry, including hands-on oil field operations and deployment of Chinese technology solutions. Proven track record of securing complex industrial environments, leading cross-functional teams, and ensuring regulatory compliance. Adept at risk assessment, incident response, and implementation of robust security protocols in challenging operational settings. Key Skills + Cyber Security Strategy & Management + Oil & Gas Industry Operations + Oil Field Security Solutions + Chinese Technology Integration & Compliance + Industrial Control Systems (ICS) Security + SCADA Systems Protection + Risk Assessment & Mitigation + Incident Response & Forensics + Regulatory Compliance (NIST, ISO, IEC) + Team Leadership & Training + Vendor Management and Liaison + Network & Endpoint Security + Cloud Security (if applicable) Responsibilities: + Lead cyber security operations for oil and gas facilities, including remote oil fields and refineries. + Develop and implement security policies tailored to industrial environments and field operations. + Oversee the integration and secure deployment of Chinese technology solutions (e.g., Huawei, Hikvision) within operational networks. + Conduct risk assessments for both IT and OT environments, identifying vulnerabilities specific to oil field equipment and Chinese tech interfaces. + Coordinate incident response plans and forensic investigations for security breaches in field sites. + Manage compliance with international standards (NIST, ISO, IEC) and local regulatory requirements. + Train and mentor cross-functional teams on cyber security awareness and best practices. + Collaborate with vendors and technology partners, including Chinese tech providers, to ensure secure implementation and ongoing maintenance. + Awareness ‘We Chat” – Chines WhatsApp + Cyber-attack methodology – Key Logging, Back door, Trojan attacks etc. including mitigation planning + Data Loss Prevention (DLP) + Application attack and defense + General Risk planning and mitigation + Cyber review planning and mitigation + Business continuity protection and modeling + Liaise with Consultant Cyber Security team Education + Degree in Cyber Security / Information Technology / Computer Science + Certifications: CISSP, CISM, GICSP, CEH, or relevant oil & gas and Chinese technology certifications Professional Development + Advanced Training in Oil & Gas Cyber Security + Workshops on Chinese Technology Integration & Security + Continuous Education in Industrial Control Systems Protection Languages + English (Fluent) + Arabic (Ideal)