LyondellBasell

Security Engineer

• Provide leadership to regional BISOs for day-to-day prioritization, project implementation, and troubleshooting technical issues
• Oversee operation of regional and local IT and ICS computing systems and security software including hardware and software lifecycle (Firewall, Anti Malware, Patch and Asset Management)
• Ensure all regional sites’ networks and systems comply with Corporate and Industry standards
• Contribute to internal documentation and standards (build documents, operational excellence, Disaster Recovery, Business Continuity, security whitepapers, Technical Designs)
• Validate translation of company policies into local languages when capable
• Advise or consult on OT changes initiated by IT and Site Management
• Participate in Purdue Level 2 and 3 monitoring, including review, validation and reporting of security metrics
• Assist in Operational Excellence audit support, Site Vulnerability Assessments and Cyber Process Hazard Analysis
• Lead project design and implementation
• Facilitate forensics investigations and incident follow-up
• Support design, implementation and documentation of security OT and M&A projects and initiatives
• Ensure effective regional security awareness program implementation and training
• Lead technical direction and strategy for ICS systems architecture and security
• Improve overall cyber resilience according to BSS roadmap
• Analyze intrusion protection processes and lead improvement efforts through automation, integration, and aggregation
• Provide information protection expertise to IT operational teams to ensure systems are properly protected and monitored by design
• Communicate threats appropriately and profile new/emerging threats
• Serve as member to event response team, providing mentoring while performing Level 2 support
• Contribute to future state technology roadmap and set technical direction for ICS systems architecture and security
• Understand security vulnerability management process and conduct vulnerability assessments for IT and ICS infrastructure, including mitigation and patch testing

Business Information Security Officer

Auditor

• The Lead IT Auditor role is an experienced position intended to utilize audit principles, skills, and techniques to evaluate the adequacy of Information Technology (IT) internal controls and processes in both design and application.
• Depending on the experience and qualification of the candidate, this position is expected to support or Lead audits of medium to high complexity with minimal to zero direction of the audit manager.
• The Lead IT Auditor is responsible for leading and/or performing audits in the following areas - Application, data platform and infrastructure audits; Implementation reviews; System penetration testing; Application control reviews; Emerging IT technologies and risks; Integrated Audits.
• The Lead IT Auditor may also be responsible for performing and/or assisting in corporate investigations, ad-hoc special projects, Sarbanes-Oxley 404 compliance activities and demonstrating the ability to function on an increasingly independent basis.
• The Lead IT Auditor is also expected to identify, initiate and implement process improvements.
• The Auditor should be self-motivated, work with a sense of urgency, support multiple priorities, meet deadlines and execute audits that meets or exceeds the quality sets by Institute of Internal Audit Standards.
• Successful candidates should be highly self-sufficient, knowledgeable to make decisions and serve as a resource for other auditors.
• While primarily based in Houston, team members will participate in audit assignments across our global Company.
• Travel to both domestic and international locations averages up to 20% a year.
• International trips range from two to three weeks.
• The position may require overtime at various times.
• The Lead IT Auditor should also possess effective communication and interpersonal skills that are at a quality that is essential to build a professional rapport with first Line operating and supervisory personnel and with higher-Level management.
• A Day in the Life: Coordinate and effectively communicate with a diversified customer base that includes many different audit areas and processes within the company.
• Liaise with IT business staff to ensure full understanding of data flow, security policies and procedures, data integrity, physical and Logical system security.
• Lead in audits related to IT process, infrastructure, ITGC (Information Technology General Controls), and pre and post implementation reviews in accordance with accepted professional standards.
• Duties include initial audit planning, setting objectives based on business and technical risks, coordination with auditee, workpaper review, evaluation, and reporting for audits.
• Optimize audit team resources to ensure successful completion of audits.
• Lead initiatives for continuous improvement in the effectiveness of the audit process.
• Provide input into the annual IT audit risk assessment and development of the annual audit plan.
• Interact effectively with associates, mid-Level management, and other personnel within the organization at all times.
• Continually demonstrate poise, self-confidence, tact, and maturity in contacts with other employees in the company.
• Identify best practices from other functions internal/external to the company and generate recommendations for improvements to reduce costs, increase efficiency, and/or effectiveness.
• Recognize and understand audit concerns of auditees and work together to a mutual resolution while maintaining independence.
• Serve as the role model and mentor Less experienced staff on professional and personal standards of performance.
• Mentor on IT-related processes and business drivers.
• Give and receive feedback to peers and subordinates appropriately.