-
Develop and deliver ICS Security Policies, Standards and Procedures based on industry standards,
regulations, and best practices.
-
Assist in determining and implementing solutions surrounding centralized support models with
ICS/OT principles.
-
Perform risk analyses on initiatives, and new technologies, and provide customized
recommendations for improving overall security posture.
-
Collaborate with business and technical stakeholders (including OT engineers) in developing and
implementing infrastructure and associated standards and procedures.
-
Stay current with developing IoT/IIoT technologies and best practices.
-
Develop best practice and architecture guidance to securely connect IoT/IIoT to enterprise and
cloud applications.
-
Develop and maintain relationships with OT and IT personnel at plant sites and corporate offices.
-
Assist with developing security plans, designs, and guidelines for remediating security risks in the
ICS/OT environments.
-
Chairing and facilitating working committees.
-
Identify, design, and help implement new security technologies and solutions in the ICS and DMZ
environments.
-
Work with and guide teams to deploy security technologies within the ICS and DMZ environments.
-
Conduct ICS/OT cyber security risk assessments.
-
Complete on-site visits in support of cyber security risk assessments.
-
Design and present monthly security awareness presentations to IT/OT personnel.
-
Examine and authorize firewall rule requests prior to implementation in ICS/OT environments.
-
Research and stay current with new ICS/OT security technologies and solutions.
-
Work with, and guide team members, to build SOPs and triage events and alerts from security
technologies and solutions in the ICS/OT environments.
-
Post-secondary Degree or Technical Diploma is preferred and six or more years of related
experience.
-
Ability to apply cyber security skills across a broad range of cybersecurity domains.
-
Experience developing and implementing cyber security projects in an ICS environment.
SANS GSEC and GICSP certifications are preferred.
-
A thorough knowledge of industrial control systems, internet of things, industrial internet of things,
cyber security, and an awareness of threats and malicious activities as they pertain to ICS and
IoT/IIoT.
-
Knowledge of ICS Cyber Security frameworks, standards, and guidelines.
-
Understating of the importance of developing and maintaining relationships with facility personnel.
-
Excellent communication skills and technical writing skills.
-
A customer focused attitude that enables the business to operate effectively in a secure manner.
-
Ability to educate and coach other OT and IT staff members on ICS cyber security issues.
-
Previous experience in similar ICS projects/environments.
-
Previous experience working with remote facilities/developing relationships with remote facilities.
-
Previous experience working with technical OT site personnel.