What are the responsibilities and job description for the OT Cyber Security Lead position at Drax?
Job Details
Operational Technology (OT) Cyber Security Lead
Flexible location - Houston. Monroe, Prince George or Vancouver
Hybrid working
Permanent, full time
Closing date: Friday 2nd May 2025
Who we are
We're not just talking about making a difference, we're making it happen. We generate dispatchable, renewable power and create stable energy in an uncertain world. Building on our proud heritage, we have ambition to become the global leader in sustainable biomass and carbon removals.
You'll be joining our teams of practical doers, future thinkers and business champions. We're enabling a zero carbon, lower cost energy future for all, and working hard to decarbonise the planet for generations to come.
About the role
The primary purpose of this role is to manage and influence all aspects of a robust cyber security presence across the Drax Group Industrial estate, but particularly in relation to the monitoring, managing and assessing of risks from open sources that could impact on the Drax Group business Operational Technology environments.
This includes both local and national threats from protestor groups to State sponsored espionage. You'll provide support to the EC&I teams, Plant Support teams and IT teams in helping to identify emerging threats, conducting analysis and writing intelligence reports specifying how best to mitigate the associated risks.
You'll assist in the delivery, enforcement and development of Industrial Security Controls in accordance with policy, standards and regulatory requirements.
This role will help to develop and support senior management with the industrial controls and skills within the group-wide security team and through the rollout of industrial controls, policies, procedures, formal training and coaching and mentoring. You'll be responsible for working with Project Teams, cyber security teams, generation stakeholders and enterprise architecture teams ensuring that they understand their responsibilities regarding logical and physical security controls.
You'll deliver against the business strategy, the technical roadmap and objectives set out in the Security strategy covering industrial security.
Additional responsibilities include:
Supporting the definition of industrial security control matrices providing oversight to other SMEs in the support of their BAU activities and maintaining accurate documentation and record keeping.
Ensuring implemented security controls are effective and in line with our policies and standards.
Leading Industrial Security meetings with key stakeholders and provide security. representation at business unit industrial security reviews and Senior Leadership Team (SLT) meetings as required, effectively communicating all industrial security related risks, controls and mitigations.
Continuing to develop and improve the Industrial Security Controls including the effective management of the required documentation and OT risk registers within the Business Unit.
Recommending and implementing an appropriate toolkit for risk management/technical/industrial/physical/architectural management.
Responsibility for Industrial Security control reporting.
Line Management responsibilities for specialist and analyst roles (x4). This will include technical mentoring and dotted line responsibilities across the team in support of the wider vertical demands.
Providing direction on the Group Security Framework, Policies, Standards and artifacts ensuring they support compliance to relevant regulation.
Ensuring compliance with security and regulatory commitments.
Participating in Audits, Technical Design Authority and Change Advisory Boards as required.
Who we're looking for
Ideally, you'll have a proven background in IT, Cyber Security and Operational Technology (control systems); having attained or working towards certification in control frameworks such as IEC62443, IEC61508, IEC61511, OG86 ; with an expert understanding of security regulations, NIS regulations/NERC-CIP/MTSA and have attained SANS GICSP certification.
You'll have the ability to interpret regulations and laws and communicate effectively to all levels of the organisation. This role also requires the ability to work successfully in a cross-functional team environment, and manage multiple projects simultaneously.
Your development
We're committed to making a tangible impact on the climate challenge we all face. Drax is where your individual purpose can work alongside your career drive. We work as part of a team that shares a passion for doing what's right for the future. With Drax you can shape your career and a future for generations to come.
Together, we make it happen.
For career development inspiration, please visit the 'My Development' intranet page here.
At Drax, we're committed to fostering an environment where everyone feels valued and respected, regardless of their role. To make this a reality, we actively work to better represent the communities we operate in, foster inclusion, and establish fair processes. Through these actions, we build the trust needed for all colleagues at Drax to contribute their perspectives and talents, no matter their background. Find out more about our approach here.
Application process
To arrange a chat or get a copy of the job description, please email
If you're ready to submit your application, please click "Apply Now" below.
Flexible location - Houston. Monroe, Prince George or Vancouver
Hybrid working
Permanent, full time
Closing date: Friday 2nd May 2025
Who we are
We're not just talking about making a difference, we're making it happen. We generate dispatchable, renewable power and create stable energy in an uncertain world. Building on our proud heritage, we have ambition to become the global leader in sustainable biomass and carbon removals.
You'll be joining our teams of practical doers, future thinkers and business champions. We're enabling a zero carbon, lower cost energy future for all, and working hard to decarbonise the planet for generations to come.
About the role
The primary purpose of this role is to manage and influence all aspects of a robust cyber security presence across the Drax Group Industrial estate, but particularly in relation to the monitoring, managing and assessing of risks from open sources that could impact on the Drax Group business Operational Technology environments.
This includes both local and national threats from protestor groups to State sponsored espionage. You'll provide support to the EC&I teams, Plant Support teams and IT teams in helping to identify emerging threats, conducting analysis and writing intelligence reports specifying how best to mitigate the associated risks.
You'll assist in the delivery, enforcement and development of Industrial Security Controls in accordance with policy, standards and regulatory requirements.
This role will help to develop and support senior management with the industrial controls and skills within the group-wide security team and through the rollout of industrial controls, policies, procedures, formal training and coaching and mentoring. You'll be responsible for working with Project Teams, cyber security teams, generation stakeholders and enterprise architecture teams ensuring that they understand their responsibilities regarding logical and physical security controls.
You'll deliver against the business strategy, the technical roadmap and objectives set out in the Security strategy covering industrial security.
Additional responsibilities include:
Supporting the definition of industrial security control matrices providing oversight to other SMEs in the support of their BAU activities and maintaining accurate documentation and record keeping.
Ensuring implemented security controls are effective and in line with our policies and standards.
Leading Industrial Security meetings with key stakeholders and provide security. representation at business unit industrial security reviews and Senior Leadership Team (SLT) meetings as required, effectively communicating all industrial security related risks, controls and mitigations.
Continuing to develop and improve the Industrial Security Controls including the effective management of the required documentation and OT risk registers within the Business Unit.
Recommending and implementing an appropriate toolkit for risk management/technical/industrial/physical/architectural management.
Responsibility for Industrial Security control reporting.
Line Management responsibilities for specialist and analyst roles (x4). This will include technical mentoring and dotted line responsibilities across the team in support of the wider vertical demands.
Providing direction on the Group Security Framework, Policies, Standards and artifacts ensuring they support compliance to relevant regulation.
Ensuring compliance with security and regulatory commitments.
Participating in Audits, Technical Design Authority and Change Advisory Boards as required.
Who we're looking for
Ideally, you'll have a proven background in IT, Cyber Security and Operational Technology (control systems); having attained or working towards certification in control frameworks such as IEC62443, IEC61508, IEC61511, OG86 ; with an expert understanding of security regulations, NIS regulations/NERC-CIP/MTSA and have attained SANS GICSP certification.
You'll have the ability to interpret regulations and laws and communicate effectively to all levels of the organisation. This role also requires the ability to work successfully in a cross-functional team environment, and manage multiple projects simultaneously.
Your development
We're committed to making a tangible impact on the climate challenge we all face. Drax is where your individual purpose can work alongside your career drive. We work as part of a team that shares a passion for doing what's right for the future. With Drax you can shape your career and a future for generations to come.
Together, we make it happen.
For career development inspiration, please visit the 'My Development' intranet page here.
At Drax, we're committed to fostering an environment where everyone feels valued and respected, regardless of their role. To make this a reality, we actively work to better represent the communities we operate in, foster inclusion, and establish fair processes. Through these actions, we build the trust needed for all colleagues at Drax to contribute their perspectives and talents, no matter their background. Find out more about our approach here.
Application process
To arrange a chat or get a copy of the job description, please email
If you're ready to submit your application, please click "Apply Now" below.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
