Security & Risk Expert

Introduction to the job

Role and responsibilities

• Implement the requirements that are relevant for security and compliance with regulations, policies and guidelines in the organization and outside•Implement and maintain the security control processes and procedures for the assets•Ensure security compliancy of the Industrial Control and Building Management system, including instruments like PLC, SCADA, historian, system security and Facility Monitoring System•Strategical contract management of security service providers•Set, implement and embed performance requirements for suppliers related to, or responsible for, the management and maintenance of OT assets•SPOC towards the regions and support them by implementing the processes and procedures•SPOC RBA for CRE•Develop the CRE Security & Risk roadmap in close collaboration with RBA•Translate the policies to practical processes for CRE•Develop the cost strategy and investment budget to achieve compliancy to corporate policies•Propose improvements and identify opportunities and present your recommendations and business case•Implement the Technical Response Team (TRT) and Cyber Defense Centre for CRE and its related suppliers, in compliancy with the corporate policies and processes•Delegated responsible for the ICS Asset Management services of CRE•Participate in the Technical Response Team (TRT) and Cyber Defense Centre as second line specialist•Conduct and derive analyses based on performance reporting in order to achieve the required level of compliancy and uptime (or maximum number of incompliances) •(co-)Develop audit procedures and planning•Bring in knowledge and align risks (with related mitigating actions) from insurance perspective and managing the accompanying evidence/documentation

Education and experience

• Bachelor / Master degree in a relevant engineering discipline (Chemical, Process Engineering)•At least 3 – 5 years of relevant experience in an international high tech industrial environment•At least 2 – 3 years’ experience in the field of ICS or OT security while managing ICS or OT assets •Preference for documented training ISA/IEC 62443•Proficient in English

Skills

Core Competencies:

• Ownership & entrepreneurship•Drive results and decision-making processes•Strategic thinking & innovation•Communicative and advisory skills•Judgement and informed decision making

Functional Competencies:

• In-Depth analytical skills •Ensures accountability•Manage Complexity•Thinks and plans ahead

Diversity and inclusion

Other information

• The ability to identify risks and develop mitigation strategies•Degree to which data is secure and protected from unauthorized access or use•Quality of data protection regulations and cybersecurity standards•TBD and physical security regulations•System availability, response time, and reliability•Reports on risk management activities and recommendations for improvements

Gerelateerde vacatures aan Security & Risk Expert

Security & Risk Expert

Security & Risk Expert

Security & Risk Expert

Security Risk Manager Sales & Service