Senior Cyber Security Engineer

For more than 20 years, Globeleq has been a long-term investor, developer, owner and operator of diversified power projects in Africa, where the company is one of the largest Independent Power Producers. With nearly 1,800MW of generation capacity in operation across 17 power plants in 7 countries, 485MW of new power projects in construction and >2,000MW in development, Globeleq is one of the largest independent power producers solely focused in Africa.

Globeleq is 70% owned by British International Investment and 30% by Norfund, the development finance institutions of the UK and Norway, and has a proven track record for supporting the ongoing development of the African power sector.

Globeleq’s various generation technologies include gas, wind, solar PV, battery energy storage (BESS), and geothermal. The company is also actively pursuing new opportunities which are emerging from the energy transition.

Globeleq is hiring a Senior Cyber Security Engineer, the main purpose of the role will be to support the Group Cyber Security Manager to develop cyber security strategies, create awareness of cybersecurity, execute against strategic and tactical roadmaps, and give security operational support. The Senior Cyber Security Engineer will use their knowledge of threats and vulnerabilities to plan, build, implement, operate, and upgrade cyber defence systems against a range of cyber security concerns across the Globeleq IT, OT and Cloud environments.

The preferred work location is Cape Town.

Cloud Security

• Design, manage, configure and maintain security of the groupwide Azure Security tenant and M365.
• Follow the change control process and work with IT and OT teams to test any changes prior to implementation and drive adoption with end-users.
• Work with IT/OT Managers and third parties to execute against the cybersecurity roadmap and to implement technical security solutions.

Network Security

• Centrally manage and maintain firewalls across the group including policies, configuration, updates, replacements and restore.
• Lead the development and maintenance of global firewalling best practice standards and be responsible for global licensing strategies.
• Develop global VPN and network access methods and policies and ensure a zero-trust methodology is upheld.
• Ensure full redundancy and uptime of firewalls is upheld, and SLAs are met.

Platform Cyber Security

• Define and drive the secure engineering and configuration of IT and OT platforms i.e. laptops, servers, email systems security devices and other systems to reduce the likelihood of exploitation of misconfigured devices.
• Work with IT and OT teams to remediate software vulnerabilities to reduce the likelihood of exploitation.
• Implement compensating controls and workarounds if a configuration or patch cannot be applied to mitigate the overall risk.
• Drive the execution of patching activities with IT teams of IT and OT network equipment where required.

Cyber Security Assessments & Investigations

• Conduct risk assessments to identify and remediate vulnerabilities and threats specific to the IT and OT energy sector.
• Propose and implement risk mitigation strategies, considering regulatory compliance and industry best practices.
• Perform cybersecurity assessments for new business developments, upgrades and changes to IT and OT environments.
• Plan and co-ordinate penetration testing and other assessments across Cloud, IT and OT environments.
• Produce risk based reports and recommendations to management for decision making.
• Maintain the cybersecurity risk register to track changes in the cybersecurity risk of the organisation.
• Lead cybersecurity investigations together with IT/OT teams and third-parties to identify and resolve root causes for cyber events and breaches.

Security Awareness, Reports, Audits & Compliance

• Collaborate with energy engineers, system operators, and IT teams to enhance security awareness.
• Perform regular phishing simulations and drive remedial training with end-users.
• Provide training sessions on security protocols and emergency response procedures.
• Stay informed about energy industry regulations (NERC CIP, ISO 27001, etc.).
• Ensure compliance…