OT/ICS Cybersecurity & Automation Specialist

Job Title

OT/ICS Cybersecurity & Automation Specialist

Business

CIS

Job Purpose

Execute the Cybersecurity and Automation technical day-to-day management and coordination of related projects and operations within the business segments to ensure alignment of all process and operational aspects with ENOC’s Automation and cyber security policies and work requirements.

This includes implementation of OT Automation and Cybersecurity needs of the organization and translating them into secure systems designs and principles, also adopt the recommended technologies and best practices within ICS/OT domain.

Support technical evaluation and site related cybersecurity and automation work in coordination with business team.

Principal Accountabilities

Enforce site installation compliance and adherence to ENOC’s cybersecurity controls, policies, and procedures.
Develop, implement, operate, and maintain security solutions with ICS infrastructure such as firewalls, IPS, patching solution, secure remote access and endpoint security.
Conduct asset inventory for the industrial automation control systems and the cybersecurity solutions and then delegate control, ownership, and authentication of OT/ICS assets to the associated asset owner.
Liaise with the cyber security & Automation team to facilitate cyber security assessments, performance reporting and projects planning and implementation.
Review and improve IT/OT network design and architecture with reference to PERA, ISA Reference Model across business units.
Design and implement security measures in line with ENOC cyber security and industrial best practices and requirements.
Review Engineering submittals (HLD, LLD, FDS, SDS, FAT, SAT, Operation manuals, etc.) from the Vendors for IACS and security systems integration.
Review risk assessments and audit observations to implement mitigation actions to address identified gaps and coordinate the identified mitigation actions with all relevant stakeholders.

Additional Principal Accountabilities

Coordinate & support site works with vendors (OEM, system integrators, Service providers) and Company’s concerned departments for the RFI, RFQ, POC, SOW, SOS, Purchase requisite, etc.
Participate in ICS projects and changes within the business unit to ensure proper implementation of cyber security requirements.
Support implementation and testing of the industrial automation control systems along with the related security technologies and controls.
Support to generate site specific Cybersecurity & Automation policies and procedures.
Partner with the department team member (Network, System, Automation) to populate the HLD, LLD, and identify improvement opportunities and the current challenges in addition to raised alerts and incidents with the OT/ICS environment.
Work with OT/ICS Automation & Cybersecurity Manager and CIC & SOC teams and department team member for the new CVE and Zero-Day vulnerability identified within the OT/ICS environment. 
Participate in ICS security incident response through all phases and act as a member of Security Incident Response Team (SIRT).
Raise and highlight pain points in aligning Automation and Cybersecurity controls within the business.

Experience

Bachelor’s degree in a technical field, e.g., (Engineering degree, Computer Science or Information Systems, Industrial Cybersecurity, or another related technical field with appropriate experience).
Demonstrated years of experience working with Automation and Security Programs phases from Assessment, design, implementation to maintain and daily operation with multinational organization or with OEM and Vendors for OT/IACS digital industries and automation systems (SCADA, DCS, SIS, PLC, PAC).
Preferred professional certifications: ISA/IEC 62442, CISSP, SANS ICS certifications
Minimum 7+ years of experience in industrial control systems and cybersecurity preferably in the Oil & Gas, Energy, Lubricant, Aviation and Critical Infrastructure
Demonstrated years of experience working with Automation and Security solutions.
Advanced Knowledge of Automation process and safety instrumented system industries standards such as IEC61131, SIL and FS standards IEC61508/IEC61511, ATEX Directive and ISA standards.
Extensive knowledge of industrial communication protocols and ports used such as: (Serial Protocols, HART, TCP/IP, UDP, DNP3, Modbus, IEC 61850, S7, OPC, OPC UA, EtherNet/IP, BACnet, Profibus and PROFINET)
Experience with security engineering principles, various cybersecurity assessment methodologies, security control implementation, and validation, and system life-cycle practices.
Experience with any OT security tools such as Darktrace, Dragos, Nozomi Networks, Claroty etc. is a must, and having training certificate is preferable.
Strong analytical and critical thinking skills, along with strong written and oral communication skillsersecurity controls within the business.