Local Information Security Officer

GENERAL JOB DESCRIPTION

The internal organization and appointment of the LISOs will be determined by the local organization in accordance with the corporate cybersecurity function. The local organization is expected to have a scope of action covering all technological systems of the company, both in the IT and OT domains. To achieve this, the local organization may need to integrate resources from other areas such as maintenance, with the LISO being responsible for coordinating all these local resources.

The LISO must have a position within the organization that allows them to influence all its areas.

It is not expected that the LISO role be a mere executor of corporate guidelines, but rather that it actively participates and contributes to global processes with its knowledge and local business expertise.

• Develop and maintain in depth understanding of business unit processes, systems, technologies, data and third parties.
• Act as the primary local Cybersecurity officer for all business stakeholders, representing the cybersecurity organization locally.
• Ensure the local implementation of global processes and architectures.
• Participate in the definition of the global processes by contributing insights based on local needs and requirements.
• Work with Corporate Cybersecurity SOC (Security Operations Center) to assist in effectively driving incidents to acceptable resolution and assist with investigations as needed.
• Provide escalation path for Cybersecurity issues, incidents, and inquiries.
• Provide local reporting to be included in the global reporting to the governance bodies.

Previous experience in cybersecurity, IT and/or OT roles.

• Knowledge of cybersecurity best practices.
• In-depth understanding of the company's local processes and operations.
• Deep understanding of the local company's technological architecture.
• Communication and interpersonal skills. Ability to influence and communicate with various levels of the organization.

• Mobility in plant.
• Requires to sit, stand, walk, use hands for technical tasks, lift and/or move up to 50 pounds.
• Visual ability with or without correction.
• Communication abilities.

Required protective equipment includes:

• Abiding by the Acerinox Code of Conduct.
• Keeping oneself informed through your company email account.
• Maintaining your Dynamic Policy Profile and all assigned learnings therein.
• Abiding by all security procedures.
• Must have strong written and verbal communication skills.
• Must be able to learn, adapt, and retain information.
• Must have strong attention to detail and problem-solving skills.