OT Cybersecurity Specialist

Role Overview

We are seeking an experienced OT Cybersecurity Specialist to serve as a Subject Matter Expert in protecting operational technology (OT) and industrial control systems (ICS/IACS) across global operations.

In this role, you will bridge the gap between information security and automation engineering. You will be responsible for establishing security controls, designing resilient architectures, conducting risk assessments, and ensuring compliance with international industrial cybersecurity standards. Additionally, you will act as the regional OT Security Representative for Poland and Norway, guiding cross-functional teams to safeguard critical infrastructure, R&D environments, and offshore assets.

Key Responsibilities

1. Secure Architecture & Engineering

• Establish security baselines, design patterns, and architectural guidelines for ICS/IACS environments, lab networks, and systems interfacing with OT infrastructure.
• Define technical security strategies tailored to OT constraints, including HMI protection, application whitelisting, perimeter firewalls, and network segmentation.

2. Risk Assessment & Vulnerability Management

• Execute risk-focused cybersecurity evaluations across production sites, remote locations, third-party systems, and vessel operations.
• Oversee threat assessments, vulnerability identification, and patch management strategies tailored to continuous OT operational environments.

3. Governance, Compliance & Documentation

• Develop, review, and enforce policies, procedural standards, and governance frameworks governing industrial security.
• Author comprehensive technical design reports and executive briefs for both technical engineering teams and senior leadership.
• Monitor key performance indicators (KPIs) to track the overall health and maturity of the OT security program.

4. Technology Implementation & Advisory

• Evaluate, test, and implement specialized security tools for industrial networks.
• Provide domain expertise to product development and engineering squads to ensure new solutions are secure by design.
• Deliver cybersecurity awareness training tailored to automation engineers and operations staff.
• Monitor emerging cyber threats targeting industrial control systems and formulate proactive mitigation plans.

Qualifications & Requirements

Technical Background:

• 6+ years of hands-on experience in cybersecurity, network engineering, or automation engineering within OT/ICS environments.
• Deep familiarity with specialized industrial software, including PLC engineering platforms, version control tools (e.g., versiondog/Octoplant), HMIs, and OPC/OPC UA protocols.
• Practical expertise in network security, including switch/router configurations, firewall policy reviews, network segmentation (Purdue Model), system hardening, and industrial patch management.
• Strong understanding of international OT security standards (e.g., ISA/IEC 62443, NIST SP 800-82).

Certifications (Highly Desirable):

• OT/ICS Security: SANS GICSP, ISA/IEC 62443 Risk Assessment Specialist, or GRID.
• General Security: CISSP, CISM, or CRISC.

Soft Skills & Other Requirements:

• Fluent in English (written and spoken) with excellent presentation and technical writing skills.
• Proven ability to communicate complex security concepts to both non-technical stakeholders and automation engineers.
• Flexibility to travel occasionally (up to 5%).