Sr. Analyst - Operational Technology and Security

Overview

Sr. Analyst - Operational Technology and Security | Houston, TX, United States (Hybrid)

Job Summary

The Senior Analyst – Operational Technology (OT) and Security is responsible for ensuring the continuity, resilience, and security of the organization’s operational technology environments. This position provides strategic leadership in the development, implementation, and management of OT security programs while addressing emerging threats and ensuring compliance with industry standards. The role requires a highly skilled professional with extensive experience in OT security, a strong understanding of offshore drilling operations, and the ability to align security initiatives with business objectives.

Principal Duties and Responsibilities

Designs, implements, configures, and maintains OT security systems and technologies in accordance with best practices.

Establishes and enforces baseline security configuration standards for operating systems, network segmentation, and identity and access management (IAM).

Maintains a comprehensive and accurate inventory of all systems, infrastructure, and applications through security information and event management (SIEM) or equivalent tools.

Monitors the cybersecurity landscape, including laws, regulations, and emerging vulnerabilities, and provides recommendations to mitigate identified risks.

Oversees log aggregation and analysis for security tools, servers, and critical applications.

Leads vulnerability analysis, management, and remediation initiatives.

Develops and delivers security awareness campaigns and training programs across the organization.

Conducts and oversees cybersecurity risk assessments in alignment with ISA/IEC 62443-3-2 and NIST CSF 2.0 frameworks.

Establishes, maintains, and enforces comprehensive security policies and procedures.

Provides regular briefings to senior management on the cybersecurity threat landscape and recommends mitigation strategies.

Designs, leads, and evaluates tabletop exercises and operational security drills.

Continuously assess current OT security practices, identifying opportunities for enhancement and modernization.

Updates and maintains business continuity and disaster recovery plans.

Safeguards the organization’s intellectual property and sensitive content.

Develops and reports on key performance metrics to measure the effectiveness of the security program.

Participates in rotational after-hours, holiday, and weekend monitoring and support as required.

Qualifications / Experience

Bachelor’s degree in information technology, Engineering, or a related discipline; advanced degree preferred.

Minimum of seven (7) years of experience in OT security.

Minimum of five (5) years of experience within the offshore drilling industry.

Professional certification in ISA/IEC 62443 is required.

Skills & Experience

Demonstrated adaptability to evolving OT landscapes and emerging security technologies.

Strong analytical capabilities with the ability to synthesize complex data into actionable insights.

Exceptional written and verbal communication skills, with the ability to engage effectively with stakeholders at all organizational levels.

Proven ability to balance competing priorities and adapt to shifting business demands.

Strong problem-solving and innovative thinking skills.

Extensive experience implementing and managing OT security technologies and controls.

Knowledge of relevant legal and regulatory requirements (e.g., Sarbanes-Oxley Act, GDPR).

Proficiency in security testing methodologies, including vulnerability scanning, penetration testing, and application security testing.

Expertise in conducting risk assessments, business impact analysis, and developing risk treatment strategies.

Ability to develop, document, and implement security architecture and long-term strategic plans.

Behaviors

Our five behaviors define the culture and guide actions and decisions:
Analyze & Plan, Collaborate, Communicate, Learn, Grow & Adapt, and Deliver Results. Employees are expected to align daily actions with these behaviors to drive outcomes and value.

The above statements describe the general nature and level of work performed by…