OT Security Asistant Manager

Founded in 1948, Karadeniz Holding engages in various sectors, primarily energy, shipbuilding, finance, and real estate industries. The Group is the only owner, operator and builder of the first Powership™ (floating power plant) fleet in the world and plays an active role in medium to long-term investments with more than 2.500 employees around the world in different 19 countries in Europe, Africa, Latam and Asia.

About Karpowership

Karpowership, part of the Karadeniz Holding, is the owner, operator and builder of the only Powership™ (floating power plant) fleet in the world and plays an active role in medium to long-term investments; providing access to fast-track, affordable and reliable electricity. Powerships have a range of 30 MW to 470 MW and are delivered ready to operate in less than 60 days. Currently, Karpowership owns and operates over than 30 Powerships with an installed capacity exceeding 3,500 MW and another 5,000 MW are under construction or in the pipeline. In addition to a Powership fleet, Karpowership owns and operates its own LNG fleet. With expertise and experience in the field, Karpowership serves as a one-stop-shop for LNG to Power solutions, as a single provider delivering all parts of the value chain; including but not limited to LNG sourcing, transport, delivery, regasification, and electricity production; with the mission of powering life wherever needed. With more than 2,000 employees globally; Karpowership is operational in Mozambique, Ghana, Sierra Leone, Guinea Bissau, Gambia, Senegal, Sudan, Ivory Coast, New Caledonia, Brazil, Dominican Republic and Cuba.

We are looking for a an OT Security Asistant Manager (Operational Technology Cyber Security) to join our Operational Excellence at our Head Office located in Kağıthane, Istanbul.

WHAT DO WE EXPECT?

• Bachelor's degree in Control Engineering, Automation Engineering or Electrical & Electronics Engineering.
• Minimum 5 years of professional experience in industrial automation, control systems or cyber security, with hands-on involvement in OT/ICS environments in the power generation, oil & gas or industrial sectors.
• Solid working knowledge of industrial control systems (PLC, DCS, SCADA, HMI, turbine and generator control systems) and the ability to work safely in live production environments.
• Hands-on experience with IEC 62443 zone & conduit design, the Purdue reference model, IT/OT segmentation and OT-DMZ architectures.
• Practical command of NIST CSF 2.0, IEC 62443 and NERC CIP, and the ability to translate them into applicable OT controls; familiarity with local energy regulations (e.g. ANEEL RN 964) is an asset.
• Experience with OT asset inventory and visibility platforms (such as Nozomi, Claroty, Dragos or Tenable OT) and with OT IDS/anomaly detection, SIEM and SOC operating models.
• Knowledge of secure remote access, privileged access management (PAM), MFA and vendor/OEM access governance in OT environments.
• Proven experience in OT risk assessments, gap analyses, security architecture reviews and in defining cyber security requirements for projects and OEM contracts.
• Familiarity with OT backup and recovery, RTO/RPO definition, incident response and tabletop exercises.
• Good understanding of industrial networks and protocols (Modbus, OPC UA, IEC 61850, PROFINET, EtherNet/IP) together with firewall, switching, VLAN and remote connectivity concepts.
• Ability to interpret electrical schematics, P&IDs, network diagrams and automation documentation.
• Experience in managing service providers, budgets and multi-site programs; certifications such as GICSP, ISA/IEC 62443, CISSP or CISM are a strong plus.
• Excellent written and spoken English (Upper-Intermediate (B2) level or above).
• Willingness and ability to travel domestically and internationally, including to powerships and power plants in operation.

WHAT AWAITS YOU?

• Lead the OT cyber security program across our powership fleet and power plants, protecting production, safety and availability while ensuring compliance with corporate management systems, international standards and local energy regulations.
• Own and maintain the OT asset inventory, criticality classification and asset ownership model, keeping the OT attack surface visible, documented and up to date across all sites.
• Design and drive the implementation of IT/OT segmentation, IEC 62443 zone & conduit structures, OT-DMZ and ICS hardening standards, working closely with automation, electrical and IT teams.
• Establish controlled access to OT environments through privileged access management, MFA, role-based access and governed vendor/OEM remote access.
• Build and operate OT monitoring and detection capability — OT IDS/anomaly detection, log collection, OT-SIEM use cases and 24/7 OT SOC coverage — and manage the related service providers.
• Develop, test and improve OT incident response plans, backup and recovery procedures and RTO/RPO targets through regular tabletop and recovery drills with operations teams.
• Conduct periodic OT risk assessments, gap analyses and site security audits, maintain the remediation roadmap, and report progress, risk exposure and KPIs to senior management.
• Define OT cyber security requirements for new projects, conversions and OEM contracts, and review vendor designs, change requests and commissioning activities before they reach production.
• Prepare and maintain OT security policies, standards and procedures, and establish controlled change and configuration management for control systems.
• Deliver awareness and competency programs for engineers, operators and vessel crews, building OT cyber security literacy across the organization.
• Act as the technical interface between plant and vessel operations, OEMs, automation integrators and IT/cyber security teams, and represent the company in regulator, client and insurer audits.
• Monitor the OT/ICS threat landscape, and translate emerging threats, vulnerabilities and OEM advisories into prioritized, operationally feasible actions.

WHAT DO WE OFFER?

• Opportunity to work on large-scale international energy projects.
• Exposure to diverse operational environments across multiple countries.
• Collaboration with industry-leading experts and access to mentoring opportunities.
• A dynamic and growth-oriented environment that supports career advancement.
• Competitive compensation and comprehensive benefits package.
• Hybrid working opportunity,
• One day off on your birthday,
• Comprehensive Private Health Insurance,
• Professional and personal training & development opportunities,
• Exclusive discounts and campaigns for employees.

In line with our "One World" philosophy, we are adding success to our achievements with our colleagues, candidates, and all stakeholders. We are committed to providing equal opportunities for all applicants, regardless of race, religion, language or gender and we crown our success with our diversity.

In accordance with the Law No. 6698 on the Protection of Personal Data, please review the Personal Data Protection Notice for detailed information regarding the processing of your personal data.