What are the responsibilities and job description for the GOM OT Cybersecurity specialist position at Calance?
Job Details
Overview
The OT Cybersecurity Specialist role is responsible for ensuring compliance with the Process Control Domain (PCD) Cybersecurity Policy and Standards and protecting the PCD from an evolving cyber threat landscape. The HESS PCD Cybersecurity Policy defines guiding principles for implementing, maintaining, and operating networks and systems for a secure PCD.
The OT Cybersecurity Specialist will assist and perform Tier 3 assessments with Technical Authorities to ensure compliance of PCD Elements and develop remediation plans in conjunction with the Technical Authorities and the Cybersecurity team for deficiencies. The OT Cybersecurity Specialist will work with operational personal to communicate necessary remediation outages and follow the MOC process for implementation. The OT Cybersecurity Specialist assists in managing access control processes and the identity lifecycle for PCD elements.
Responsibilities & Duties
Ensure compliance with the Process Control Domain (PCD) Cybersecurity Policy and Standards.
Manage logical access to PCD Elements through the entire identity life cycle including onboarding, offboarding, access permissions, and password rotation.
Remediate PCD Element vulnerabilities through patching and configuration (i.e., firmware, operating system, drivers, applications).
Review PCD Element logs for anomalies, indicators of compromise, or other events of note.
Facilitate site specific cybersecurity incident response for the PCD. Review and maintain facility specific IRP documents.
Maintain and manage PCD network perimeter and segmentation through firewall administration.
Standardize and maintain PCD element configurations.
Maintain and update endpoint protection (i.e., antimalware) capabilities on PCD Elements.
Create, and test Disaster Recovery Plans (DRP) for PCD elements and applications.
Create and maintain PCD asset and facility documentation, such as specifications, for asset or facility
Assist and participate in cybersecurity awareness for site specific and enterprise programs to ensure all PCD users are mindful.
Participate in cybersecurity planning, governance, and risk management activities with associated technical authorities.
Manage PCD Elements including servers, domain controllers, virtual environments, backup and restore equipment and services, network devices, and application life cycle ensuring PCD elements are under support and critical spares are available.
Assisting with cybersecurity interests of new projects that will impinge upon PCD elements.
Provision of necessary documentation (Safe Work Instructions and Procedures) providing instructions for others to undertake specific PCD duties.
Auditing of SAP closure reports to ascertain workscopes undertaken comply with the requirements of the PCD Cybersecurity Policy and Standards.
Provision of assistance for auditing team support and closing out audit items in a planned and timely manner.
Management of asset vulnerability log, and remediation planning.
Experience/Skills
Experience with the following:
Industrial Control Systems (i.e., DCS, ESD, SIS, PLC, HMI, SCADA)
Networking Fundamentals (i.e., Routing, Switches, IP Management)
Firewall Administration (i.e., Palo Alto, Juniper)
Microsoft Windows Server Administration
Vmware ESXi & vCenter
Antimalware applications (i.e., McAfee)
Claroty CTD & SRA experience would be beneficial
Cybersecurity Fundamentals (i.e., Security ).
Excellent writing and verbal communication skills.
Knowledge of safety requirements and practices.
Knowledge of NIST 800-82 & IEC 62443.
Knowledge of Management of Change procedures and protocols.
Education & Training
High school diploma or equivalent required.
Associates or technical degree preferred.
Must have valid driver s license.
BOSIET (or similar) for GOM (quarterly offshore visits required) position.
The OT Cybersecurity Specialist role is responsible for ensuring compliance with the Process Control Domain (PCD) Cybersecurity Policy and Standards and protecting the PCD from an evolving cyber threat landscape. The HESS PCD Cybersecurity Policy defines guiding principles for implementing, maintaining, and operating networks and systems for a secure PCD.
The OT Cybersecurity Specialist will assist and perform Tier 3 assessments with Technical Authorities to ensure compliance of PCD Elements and develop remediation plans in conjunction with the Technical Authorities and the Cybersecurity team for deficiencies. The OT Cybersecurity Specialist will work with operational personal to communicate necessary remediation outages and follow the MOC process for implementation. The OT Cybersecurity Specialist assists in managing access control processes and the identity lifecycle for PCD elements.
Responsibilities & Duties
Ensure compliance with the Process Control Domain (PCD) Cybersecurity Policy and Standards.
Manage logical access to PCD Elements through the entire identity life cycle including onboarding, offboarding, access permissions, and password rotation.
Remediate PCD Element vulnerabilities through patching and configuration (i.e., firmware, operating system, drivers, applications).
Review PCD Element logs for anomalies, indicators of compromise, or other events of note.
Facilitate site specific cybersecurity incident response for the PCD. Review and maintain facility specific IRP documents.
Maintain and manage PCD network perimeter and segmentation through firewall administration.
Standardize and maintain PCD element configurations.
Maintain and update endpoint protection (i.e., antimalware) capabilities on PCD Elements.
Create, and test Disaster Recovery Plans (DRP) for PCD elements and applications.
Create and maintain PCD asset and facility documentation, such as specifications, for asset or facility
Assist and participate in cybersecurity awareness for site specific and enterprise programs to ensure all PCD users are mindful.
Participate in cybersecurity planning, governance, and risk management activities with associated technical authorities.
Manage PCD Elements including servers, domain controllers, virtual environments, backup and restore equipment and services, network devices, and application life cycle ensuring PCD elements are under support and critical spares are available.
Assisting with cybersecurity interests of new projects that will impinge upon PCD elements.
Provision of necessary documentation (Safe Work Instructions and Procedures) providing instructions for others to undertake specific PCD duties.
Auditing of SAP closure reports to ascertain workscopes undertaken comply with the requirements of the PCD Cybersecurity Policy and Standards.
Provision of assistance for auditing team support and closing out audit items in a planned and timely manner.
Management of asset vulnerability log, and remediation planning.
Experience/Skills
Experience with the following:
Industrial Control Systems (i.e., DCS, ESD, SIS, PLC, HMI, SCADA)
Networking Fundamentals (i.e., Routing, Switches, IP Management)
Firewall Administration (i.e., Palo Alto, Juniper)
Microsoft Windows Server Administration
Vmware ESXi & vCenter
Antimalware applications (i.e., McAfee)
Claroty CTD & SRA experience would be beneficial
Cybersecurity Fundamentals (i.e., Security ).
Excellent writing and verbal communication skills.
Knowledge of safety requirements and practices.
Knowledge of NIST 800-82 & IEC 62443.
Knowledge of Management of Change procedures and protocols.
Education & Training
High school diploma or equivalent required.
Associates or technical degree preferred.
Must have valid driver s license.
BOSIET (or similar) for GOM (quarterly offshore visits required) position.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
