Local Information Security Officer

GENERAL JOB DESCRIPTION:
The internal organization and appointment of the LISOs will be determined by the local
organization in accordance with the corporate cybersecurity function. The local organization is
expected to have a scope of action covering all technological systems of the company, both in
the IT and OT domains. To achieve this, the local organization may need to integrate resources
from other areas such as maintenance, with the LISO being responsible for coordinating all these
local resources. The LISO must have a position within the organization that allows them to
influence all its areas.

ESSENTIAL JOB FUNCTIONS:
It is not expected that the LISO role be a mere executor of corporate guidelines, but
rather that it actively participates and contributes to global processes with its knowledge and
local business expertise.

A summary of its main functions would be as follows:
• Develop and maintain in depth understanding of business unit processes, systems,
technologies, data and third parties.
• Act as the primary local Cybersecurity officer for all business stakeholders, representing the
cybersecurity organization locally
• Ensure the local implementation of global processes and architectures
• Participate in the definition of the global processes by contributing insights based on local
needs and requirements
• Work with Corporate Cybersecurity SOC (Security Operations Center) to assist in effectively
driving incidents to acceptable resolution and assist with investigations as needed.
• Provide escalation path for Cybersecurity issues, incidents, and inquiries.
• Provide local reporting to be included in the global reporting to the governance bodies

SUPPLEMENTAL JOB FUNCTIONS:
1. Other duties as assigned
2. Participation in relevant continuous improvement programs.

MINIMUM EDUCATION, SKILLS AND EXPERIENCE:
Previous experience in cybersecurity, IT and/or OT roles
• Knowledge of cybersecurity best practices
• In-depth understanding of the company's local processes and operations
• Deep understanding of the local company's technological architecture.
• Communication and interpersonal skills. Ability to influence and communicate with various
levels of the organization

PHYSICAL ABILITIES REQUIRED:
• Mobility in plant
• While performing the duties of (this job), the employee is regularly required to sit, stand,
walk, etc.
• The employee is frequently required to make use of their hands for technical tasks
• The employee must occasionally lift and/or move up to 50 pounds
• Visual ability with or without correction
• Communication abilities

HEALTH AND SAFETY:
1. Work in compliance with the Occupational Health and Safety Act and regulations
2. Follow Company safety rules
3. Report the absence of or defect in any protective equipment or clothing to the Supervisor
or Manager immediately
4. Use or wear the equipment, protective devices or clothing that is required to be used or
worn:
a. Safety shoes
b. Safety glasses
c. Hearing protection
d. Hard Hat
Some areas may require additional personal protective equipment such as:
e. Respirators; the respirator requires you to be clean shaven in order to comply with
company policies and procedures as well as OSHA Regulations.
f. Fire Retardant clothing
g. Acid PPE
5. Report to the Safety Coordinator, Group Lead or Supervisor any contravention of the
Occupational Health and Safety Act and Regulations or Company policy
6. Must follow all Lock out Tag out (LOTO) guidelines for designated machines
7. Must follow all Environmental Policies and Regulations
8. Maintain a clean and safe work area

WORK ENVIRONMENT:
1. Work in compliance with the Occupational Health and Safety Act and regulations
2. Clean, well ventilated and safe work areas.

HUMAN RESOURCES:
1. Abiding by the Acerinox Code of Conduct
2. Keeping oneself informed through your company email account
3. Maintaining your Dynamic Policy Profile and all assigned learnings therein
4. Abiding by all security procedures
5. Must have strong written and verbal communication skills
6. Must be able to learn, adapt, and retain information
7. Must have strong attention to detail and problem-solving skills