Head Operational Technology (OT) Security

Job Description

Position Summary The Head of Operational Technology (OT) Security will be responsible for leading and managing the OT security function within Tribastion. This role involves overseeing the security posture of clients' OT environments, developing and implementing comprehensive security strategies, and ensuring compliance with industry regulations and best practices. The ideal candidate will possess deep expertise in both IT and OT security, a robust understanding of industrial control systems (ICS), and a strong ability to bridge the gap between traditional information security and operational technology environments Key Responsibilities: Strategic Leadership o Conduct security reviews and assessments of clients OT landscapes to advise on enhancement. o Develop strategies, roadmaps, and new operating models aligned with organizational objectives. o Collaborate with senior leadership to integrate OT security considerations into broader business strategies. Policy, Governance and Compliance o Establish and enforce OT security policies, standards, and guidelines. o Ensure compliance with relevant industry regulations and standards (e.g., NIST, IEC 62443). Risk Management o Conduct regular risk assessments of OT environments to identify vulnerabilities and threats. o Design, build and protect industrial control systems, applications, data, assets, and people by implementing risk mitigation strategies and monitoring their effectiveness. Incident Response o Develop and maintain OT-specific incident response plans. o Lead and coordinate responses to OT security incidents, ensuring minimal impact on operations. Collaboration and Training o Work closely with IT/OT security, engineering, and operations teams to ensure cohesive security measures. o Provide training and awareness programs for staff related to OT security best practices. Technology and Innovation o Evaluate and implement advanced security technologies tailored for OT environments. o Stay updated with emerging threats and advancements in OT security. Vendor and Stakeholder Management o Liaise with vendors, partners, and external stakeholders to ensure the security of third-party integrations. o Negotiate and manage contracts related to OT security solutions. Solutions and Pre-sales Support: o Develop and deliver proposals and scope of work documents. o Work with business team and clients technology function to create new product and service offerings to reduce cyber risk in OT environments. Qualifications Education: o Bachelor's degree in Cybersecurity, Information Technology, Industrial Engineering, or a related field. A master's degree or relevant certifications (e.g., CISSP, CISM, GICSP) is preferred. Experience: o Minimum of 8-10 years of experience in OT security, including hands-on experience with industrial control systems (ICS), SCADA systems, and related technologies. o Proven track record of leading OT security teams and managing complex security projects in a managed services or consulting environment. Skills and Competencies o Deep understanding of industrial control systems (ICS), PLC, DCS, HMI, SCADA systems, and other OT environments. o Experience supporting industrial protocols such as OPC, Modbus TCP, HART, and Foundation Fieldbus. o Familiarity with OT security frameworks and standards (e.g., NIST SP 800-82, IEC 62443). o Experience troubleshooting industrial protocols such as OPC, Modbus TCP, HART, and Foundation Fieldbus. o Experience with ICS security industry practices, with comprehensive working knowledge and exposure to one or more of the following: IEC 62443/ISA 99, ISO 27001, NIST SP 800-82, and CPNI best practices. o Experience deploying or supporting security practices and technologies such as risk or vulnerability assessments, antivirus software, firewalls, intrusion detection systems, and centralized alert logging and monitoring in ICS environments (e.g., energy/power companies or large manufacturing organizations). o Strong analytical and problem-solving skills. o Excellent communication and interpersonal abilities. o Ability to work in high-pressure situations and make informed decisions rapidly. o Willingness to travel to client sites as required.

More Info

Education