Sr OT GRC Specialist

Job Summary

This position is an experienced senior level handson technical lead performing OT security functions and maintaining systems while providing technical guidance to the team. Manages OT Governance Risk and Compliance capabilities including as OT Vulnerability & Risk Compliance OT Cyber Governance OT Cyber Strategy OT Cyber & 3rd Party Risk & OT Security Architecture as well as security policies and procedures and incident response as needed. Provides technical expertise and support OT management and staff in cybersecurity threat risk assessments development testing and the implementation and operation of appropriate information security plans procedures and control techniques designed to prevent minimize or quickly recover from cyberattacks or other serious events.

Job Responsibilities

Responsibilities include:
Manages OT GRC capabilities including Vulnerability & Risk Compliance Cyber Governance Awareness & Strategy Cyber & 3rd Party Risk & Security Architecture.
Provides technical expertise and support to OT management and staff in cybersecurity threat risk assessments development testing and the implementation and operation of appropriate information security plans procedures and control techniques designed to prevent minimize or quickly recover from OT cyberattacks or other serious events.
Has strong incident response and threat analysis experience. Proficient in defining processes and procedures for incident response.
Follows cyber security news and alerts understands complex attack vectors and risks and identifies and evaluates emergent cyber security threats and vulnerabilities. Recommends appropriate corrective actions for information security incidents and provides risk mitigation recommendations to management and team.
Designs process flows to be implemented to respond to threats quickly and effectively.
Reviews complex architecture design diagrams and documents for new technologies and changes to existing technologies to determine risks and provide recommendations and mitigations.
Works independently with little or no supervision.

Job Specific Qualifications

Required:
Bachelors degree in Computer Science Information Systems Cyber Security Math or Engineering and a minimum of 6 years of experience in Information Security
In lieu of a degree a minimum of 10 years of experience in Information Security
Must demonstrate strong verbal and written communication skills.
Must demonstrate excellent leadership technical teamwork and interpersonal skills.
Must be willing to work in strong team environment constantly teaching and learning from other team members.
Demonstrated ability to foster working relationships with the team IT Management and Client departments.
Demonstrated ability to explain technical concepts to the business users in the context of business requirements.
Must demonstrate technical experience including: OT / data / network / computer security design administration and/or assessment.
Must demonstrate broad knowledge of information systems including Windows security network security systems development communication networks security software/hardware and operating systems.
Must have experience with key information security technologies such as SIEM firewalls intrusion detection/prevention systems vulnerability assessment encryption identity and access control systems antimalware and security event analysis.
Must demonstrate strong organizational managerial and financial management skills.
Must demonstrate the ability to communicate effectively with both technical and nontechnical individuals.

Desired:
Experience in Operational Technology (OT) Security is a plus
ISC2 Certified Information Systems Security Professional (CISSP) or equivalent
Programming Experience in Python
NOTE:
Approximately 5 Travel required
Please note if NERC CIP position requires NERC CIP background investigation prior to start

Minimum Years of Experience

Education

Certifications

Disclaimer

Certain positions at the Company may require you to have access to Part 810Controlled Information. Under the law the Company is limited in who it can share this information with and in certain circumstances it is necessary to obtain specific authorization before the Company can share this information. Accordingly if the position does require access to this information you must complete a 10 CFR Part 810 Export Control Compliance Nationality Request Form a copy of which will be provided to you by Talent Acquisition if an offer is made. If there is a need for specific authorization due to the time it takes to obtain authorization from the government we will likely not be able to further proceed with an offer.