Title:
Cyber Security Manager

Position: Cyber Security Manager

Project: IFMS Project

Location: Basra, Iraq

Rotation 28/28 rotation

Nationality: Open

"Belong, Connect, Grow, with KBR!

The KBR team of teams delivers future-forward science, technology and engineering solutions and mission-critical services that help governments and companies around the world accomplish their most important objectives, while also helping achieve their sustainability goals.

KBR Sustainable Technology Solutions provides holistic and value-added solutions across the entire asset life cycle. These include world-class licensed process technologies, differentiated advisory services, deep technical domain expertise, energy transition solutions, high-end design and engineering capabilities, and smart solutions to optimize planned and operating assets."

Professional Summary

Experienced Cyber Security Manager with over [10] years of expertise in the oil and gas industry, including hands-on oil field operations and deployment of Chinese technology solutions. Proven track record of securing complex industrial environments, leading cross-functional teams, and ensuring regulatory compliance. Adept at risk assessment, incident response, and implementation of robust security protocols in challenging operational settings.

Key Skills

• Cyber Security Strategy & Management
• Oil & Gas Industry Operations
• Oil Field Security Solutions
• Chinese Technology Integration & Compliance
• Industrial Control Systems (ICS) Security
• SCADA Systems Protection
• Risk Assessment & Mitigation
• Incident Response & Forensics
• Regulatory Compliance (NIST, ISO, IEC)
• Team Leadership & Training
• Vendor Management and Liaison
• Network & Endpoint Security
• Cloud Security (if applicable)

Responsibilities:

• Lead cyber security operations for oil and gas facilities, including remote oil fields and refineries.
• Develop and implement security policies tailored to industrial environments and field operations.
• Oversee the integration and secure deployment of Chinese technology solutions (e.g., Huawei, Hikvision) within operational networks.
• Conduct risk assessments for both IT and OT environments, identifying vulnerabilities specific to oil field equipment and Chinese tech interfaces.
• Coordinate incident response plans and forensic investigations for security breaches in field sites.
• Manage compliance with international standards (NIST, ISO, IEC) and local regulatory requirements.
• Train and mentor cross-functional teams on cyber security awareness and best practices.
• Collaborate with vendors and technology partners, including Chinese tech providers, to ensure secure implementation and ongoing maintenance.
• Awareness 'We Chat" - Chines WhatsApp
• Cyber-attack methodology - Key Logging, Back door, Trojan attacks etc. including mitigation planning
• Data Loss Prevention (DLP)
• Application attack and defense
• General Risk planning and mitigation
• Cyber review planning and mitigation
• Business continuity protection and modeling
• Liaise with Consultant Cyber Security team

Education

• Degree in Cyber Security / Information Technology / Computer Science
• Certifications: CISSP, CISM, GICSP, CEH, or relevant oil & gas and Chinese technology certifications

Professional Development

• Advanced Training in Oil & Gas Cyber Security
• Workshops on Chinese Technology Integration & Security
• Continuous Education in Industrial Control Systems Protection

Languages

• English (Fluent)
• Arabic (Ideal)