IT-OT Cyber Security Lead

Req Id:  15337
Job Family:  IT
Location: 

Amsterdam (Schiphol), NL, 118CL

 

Our Vision.

SBM Offshore believes the oceans will provide the world with safe, sustainable and affordable energy for generations to come. We share our experience to make it happen.

 

Our Profile.

We design, build, install and operate offshore floating facilities for the offshore energy industry. As a leading technology provider, we put our marine expertise at the service of a responsible energy transition by reducing emissions from fossil fuel production, while developing cleaner solutions for renewable energy sources. More than 7,000 SBMers worldwide are committed to sharing their experience to deliver safe, sustainable and affordable energy from the oceans for generations to come. Together, we are driving progress forward in a TRUE. BLUE. TRANSITION. 

 

#OGJS

ROLE  PURPOSE

The IT/OT Cyber Security Lead is responsible for research, development, implementation, testing and reviewing SBM’s Industrial Control Systems Security.

This role requires interacting with all the functions of the OT and IT Teams to protect the systems and improve the overall cyber security posture.

The IT/OT Cyber Security Lead must have a good understanding of business objectives and goals, industry domain expertise, Industry Control Systems’ knowledge, methods, and techniques.

A high priority in this role is to ensure business continuity. This is accomplished by anticipating technical security risks and securing all critical working environments. This role will oversee and/or assist in performing on-going security monitoring of organization systems.

The IT/OT Cyber Security Lead must have excellent interpersonal and leadership skills with a focus on stakeholder engagement and communication.

 

Responsibilities

  • Assume leadership in implementing approved standards and best practices for the secure integration of operational technology (OT) and information technology (IT) infrastructure.
  • Conduct functional and gap analyses to assess the degree of compliance of key business areas and infrastructure with statutory and regulatory requirements.
  • Take the lead in developing, adopting, and enforcing security policies, procedures, and standards for both OT and IT.
  • Regularly assess the overall security posture to mitigate cyber exposure risk while maintaining optimal operational performance.
  • Evaluate and propose new cybersecurity technologies and countermeasures to mitigate threats to the confidentiality, integrity, and availability of systems.
  • Aid in the selection of vendor products and collaborate with internal stakeholders to generate or procure the necessary artifacts for expedited technical implementation.
  • Coordinate with relevant internal teams and conduct cross-functional assessments to ensure that proposed solutions align with the company's security principles.

 

Expected Outcomes & Impacts

The performance of the IT/OT Cyber Security Lead will be measured on business impact (business outcomes achieved or affected), by connecting IT/OT initiatives to stakeholders’ mission-critical priorities.

  • Impact metrics: Business impact / Risks quantification and mitigations / Compliance with governance models.
  • Progress metrics: IT/OT Initiatives quality / Time from insight to action / Cybersecurity maturity level.

 

JOB REQUIREMENTS

  • A degree in Engineering (Electrical or Computer), Computer Science, or equivalent.
  • Relevant Industry certifications: GICSP, GCIP, GRID, CISSP (preferred but not mandatory).
  • 5 or more years of combined experience in the fields of OT and IT.
  • 4 or more years of relevant experience in OT or Industrial Control Systems Security, preferably in the Energy sector (specifically in the Oil & Gas industry).
  • Experience in integration and operation of Industrial Control Systems Security.
  • Experience with OT networking and knowledge of the Purdue Model.
  • Deep understanding of ISA/IEC 62443 and NIST SP 800-82.
  •  Knowledge of NIS2 directive.
  • Experience in design and management of Information Security solutions.
  • Experience with working with global teams in various time zones.

 

GENERAL INFORMATION

 

SBM Offshore N.V. is a listed holding company that is headquartered in Amsterdam. It holds direct and indirect interests in other companies that collectively with SBM Offshore N.V. form the SBM Offshore Group (“the Company”). For further information, please visit our website at www.sbmoffshore.com. The companies in which SBM Offshore N.V., directly and indirectly, owns investments are separate entities.

 

SBM Offshore is proud to be an Equal Employment Opportunity and Affirmative Action employer. SBM Offshore does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status, or any other basis covered by appropriate law.  All employment is decided on the basis of qualifications, merit, and business need.