Your responsibilities

• You will provide Specialist Expert Cyber Security knowledge and guidance to the wider site team and be the first point of contact for OT security support, issues and challenges at CDCPK.
• You will be responsible for the application of the business Information Security management System (ISMS) at CDCPK including local risk management and reporting to the plant executive using business risk tools and reporting systems.
• Using your experience, you will develop and maintain site security documentation including asset inventory registers, backup and restoration procedures, supplier lists, access control lists, network diagrams, regular reporting PIs/KPIs etc.
• Responsible for the local incident management and OT crisis management by steering local back-up strategy as well as recovery- and cyber defence plans, you will also support the OT-Security Operations Centre (SOC) in the investigation and response of security alerts and incidents.
• Develop and maintain site security technologies and controls e.g. remote connection, antivirus, application whitelisting, intrusion detection system, asset management and user analysis system.
• Support the Distributed Controls Systems Engineer and Control & Instrumentation Engineers in the delivery of the OT maintenance tasks including patch management, backups, etc to ensure the security of supply and cyber security compliance strategies related to the site OT assets.
• Lead and co-ordinate with the Information Security Manager ongoing security programs including risk assessments, table-top exercises and security testing for site operational technology equipment.
• Using your stakeholder management skills, lead the CDCPK IT Interaction and make recommendations to the CDCPK management team on decisions on implementation of IT changes at CDCPK.
• Pro-actively support the Cyber Security Culture, leading by example in actions and words.

Your profile

Essential:

• Educated to a Higher National Certificate/Degree level in Cyber Security/ IT Engineering or equivalent, supported with an extensive technical knowledge of cyber security practises gained through experience.
• Excellent knowledge of Cyber Security in an OT environment, knowledge of Siemens and Allan Bradley Control system advantageous.
• An excellent understanding of all relevant legislations e.g. health and safety, environmental, cyber security and standards that CDCPK as an OES will operate within e.g. ISO2700x, IEC 62443.
• Strong interpersonal skills to enable effective working relationships and communication.
• Positive work ethic with the confidence to challenge established practices.
• Able to work confidentially with senior members of CDCPK and Uniper.
• A high level of understanding of IT systems (including networking fundamentals) to act as an intelligent customer for IT.
• Good written communication skills with the ability to produce clear and concise procedures, specifications, audit reports, business cases etc.
• Ability to think rationally but act positively when under pressure.
• Use and knowledge of best practice tools for resolving engineering issues to root cause level.
• An understanding of the health, safety and environmental aspects of the management of external service providers activities.

Desirable:

• An extensive understanding of Power Station/Gas Plant operations.
• A proven ability to maximise operational performance.
• Contract management skills to enable effective working relationships.
• Undertake the role of Nominated Supervisor and Competent Person under E&M safety Rules.