Cyber Security Specialist

<p></p>
<p>
CYBER SECURITY SPECIALIST</p>
<p>
</p>
<p>
PURPOSE STATEMENT</p>
<p>
The role of the IACS Cyber Security Specialist is to deliver on the ambition of the client to be sustainably top quartile for safe and reliable operations. </p>
<p>
The IACS Cyber Security Specialist role drives equipment and system availability through proactive mitigation of equipment and system degradation, active support to front line operations and development of tactics and plans for medium to long term.</p>
<p>
Perform the IACS Cyber Security Specialist role to safeguard, support and assure the Asset Integrity and Process Safety of E&amp;P Assets within the clients Portfolio and comply with industry standard IEC 62443 and HSE guideline OG86.</p>
<p>
Provide service to and collaborates closely with lead engineers, maintenance engineers, operations managers and project managers in the scoping and execution of Cyber Security activities.</p>
<p>
</p>
<p>
ACCOUNTABILITIES</p>
<p>
Focal point for Cyber Security project scopes and development. </p>
<p>
Development of scope and provision of support for external Cyber Security study work.</p>
<p>
Develop and maintain detailed plans to address internal and external commitments.</p>
<p>
Provide updates to the IACS Cyber Security framework documents and roll out plans. </p>
<p>
Provide regular status reporting to stakeholders as required.</p>
<p>
Review and endorse IACS management of change where necessary. </p>
<p>
Development and endorsement of IACS Cyber Security competency framework.</p>
<p>
Represent the client where required with external auditor and inspections, for example HSE and Centrica.</p>
<p>
Participate/facilitate IACS security risk assessments.</p>
<p>
Assist the asset with gap analysis against the IACS Security Standard and assist with raising deviations. </p>
<p>
Management of third party Cyber Security service providers.</p>
<p>
Identify and endorse shutdown activities as required.</p>
<p>
Actively support Cyber Security technology development and evaluation.</p>
<p>
Actively support an Incident Free Workplace mindset.</p>
<p>
Visibly contribute to integrated planning and department objectives.</p>
<p>
Development of AFE's (Approval For Expenditure) as required.</p>
<p>
</p>
<p>
COMPETENCIES</p>
<p>
Good communicator and influencer, able to present complex issues in a clear and concise manner. </p>
<p>
Able to understand and articulate Cyber Security issues and proposed solutions. </p>
<p>
Ability to review and analyse technical and Cyber Security data effectively.</p>
<p>
Working experience with Cyber Security Standards including IEC 62443, OG 86 and NIST.</p>
<p>
Self-motivated, shows initiative and an ability to work independently with limited guidance.</p>
<p>
Extensive experience from oil and gas projects.</p>
<p>
High level of understanding of how to interact with business and safety critical systems in a safe manner based on risk and consequence analysis. </p>
<p>
Flexible, proactive, and able to embrace and drive change and improvement initiatives.</p>
<p>
Ability to handle responsibility, lead disciplinary and interdisciplinary work and periodically high workloads.</p>
<p>
Be a visible driving force for the client and their values, leading by example and having the courage to challenge and address inconsistencies across the organisation. </p>
<p>
Highly developed organisation skills, anticipates problems and identifies solutions. </p>
<p>
Adhere to the clients values, not only focusing on achieving the tasks and objectives, but also delivering in the clients way.</p>
<p>
Aspire to excellence in Cyber Security delivery taking accountability for performance. </p>
<p>
Proven relationship-builder across various disciplines/functions.</p>
<p>
</p>
<p>
EDUCATION</p>
<p>
Engineering degree.</p>
<p>
Recognised Cyber Security qualification.</p>
<p>
</p>
<p>
WORK EXPERIENCE</p>
<p>
Substantial engineering and operations experience in oil and gas. </p>
<p>
Very high level of technical and engineering competence. </p>
<p>
Experience with operational technologies as PLCs, SCADA, DCS and Safety Systems (SIS, F&amp;G, ESD, PSS/PSD) </p>
<p>
Experience with IACS Cyber Security application to the oil and gas industry.</p>
<p>
</p>
<p>
MANDATORY TRAINING</p>
<p>
All client mandatory training as requested, including Compliance training usually provided annually.</p>
<p>
Must possess a valid Basic Offshore Induction and Emergency Training (BOSIET) certificate.</p>
<p>
</p>