Job Posting Status is Expired Please note that the job is not published for job seekers and you will not receive any applicants due to the job status.
Upload
Job Description
This role is a 12 month contract.
To design, generate, propose, implement and follow through actions related to protecting industrial control systems (ICS) in critical infrastructure and key resource sectors in power and water sector where NOMAC operates.
Strategy & Plans
- To work with control system SMEs and operational staff to design, implement and support the security of ICS networked systems including but not limited to; security technologies such as firewall logs, IDS, endpoint security solutions, access control systems, and other related security technologies within ICS environment.
- Incident response and handling in an ICS environment to include investigating computer and network intrusions; remediation support; performing comprehensive computer surveillance/monitoring, identifying vulnerabilities; developing secure network designs and protection strategies, and audits of information security infrastructure
- Lead maintenance and administration efforts of internal ICS infrastructure utilizing strong understanding of ICS environments
- Support current and legacy computer technologies in ICS environment. Operating systems may include Windows 95 through Windows 10 (and beyond) and various Linux operating system
- Maintains the compliant cybersecurity ICS architecture of the plants as per the local regulatory bodies.
- Responsible for completion of the ICS DR recovery Plans, work with the local I&C team to populate and maintain the Plan as per the corporate standards.
- Actively manage and coordinate DR testing schedules, objectives, exercises and reviews.
- Collecting and documenting information about current systems at each site including control applications, hardware, network and infrastructure and their dependencies.
- Will be responsible to work with the NOMAC ICS local teams at each site to ensure that DR capabilities across the ICS environment will meet the Recovery time (RTO) and Recovery point (RTO) objectives.
- Making sure the plan is tested as per the schedule in the DRP.
- Maintaining compliance with corporate and national regulation with regard to ICS cyber security.
- Participate in ICS security incident response through all phases.
- Consult on ICS security matters as needed.
- Act as a liaison between operations and corporate IT security teams.
- Design, implement and manage innovative solutions for ICS infrastructure environments.
- Attend meetings at various locations (in different countries) either in person or remotely on a short notice to participate and understand the ICS challenges requiring innovative and cost-effective solution.
- Assist Monitoring & Prediction Centre (MPC) team to resolve ICS related issues (including connectivity aspects) for various plants on timely basis.
People Management (if applicable)
- Manage the effective achievement of the team’s objectives through setting individual objectives, managing performance, developing the team and providing formal and informal feedback to maximise overall performance, engagement and motivation.
- Hire young and energetic employees to be ‘feet on the ground’, train and develop them to become future Leaders.
Budget Management
Prepare department’s budget; manage and monitor the financial performance against the budget so that areas of unsatisfactory performance are identified, rectified promptly and potential departmental performance improvement opportunities are capitalised upon.
Policies, Processes, Systems & Procedures
Contribute to the development and implementation of department policies, procedures and controls covering all areas of department activity so that all relevant procedural/legislative requirements are fulfilled while delivering a quality, cost-effective service.
Health, Safety, Security and Environment
Ensure compliance to all relevant health, safety, security and environmental management policies, procedures and controls across the department to guarantee employee safety, legislative compliance and a responsible environmental attitude.
Continuous Improvement
Identify opportunities of improvement and contribute to organisational and departmental change initiatives, programmes and projects taking into account best practice and standards in the business environment.
Skills
- A Bachelor degree holder in Electrical/Electronics, mechatronics or Industrial Engineering or related field
- 10+years of experience in managing ICS systems (including security aspects) with a track record of successful accomplishments
- Minimum of 3 years previous experience working in ICS cyber security
- Minimum of 3 years previous experience developing and/or deploying mitigation techniques for defending networks including ICS patch management (like Windows, Unix, Linux and other such operating systems
- Experience with various DCS/PLC/SCADA systems including managing cybersecurity aspects is preferable
- In depth understanding of operating systems, network/system architecture, and IT architecture design related to ICS
- Thorough understanding and extensive experience with operational technologies such as Programmable Logic Controllers (PLCs), Supervisory Control and Data Acquisition (SCADA) software, and Distributed Control Systems (DCS) and the role of common system components
- Understanding of IT and OT network communication protocols (including TCP/IP, UDP, DNP3, Modbus, IEC 61850, OPC, OPC UA, and PROFINET) and ability to perform packet analysis
- Understanding of threats, vulnerabilities, and exploits in ICS environment and appropriate mitigation techniques
- Understanding of ICS design considerations with emphasis on human safety and the availability/security of operating environment