Cyber Security Team Lead - LNG Job Houston area,Texas USA,IT/Tech

Job Description:

Cyber Security Team Lead – LNG

Location:

Houston, TX (onsite)
Duration: 12 Months

Experience:

10+ Years

Job Summary

We are seeking an experienced Cyber Security Team Lead to establish, lead, and manage the enterprise cybersecurity program for an LNG export facility transitioning from construction to commercial operations.

The ideal candidate will have strong hands‑on experience in cybersecurity architecture, IT/OT security, cloud security, identity management, and security operations within the energy, oil & gas, LNG, or critical infrastructure industry.

This role will be responsible for developing enterprise security architecture, implementing IT/OT security controls, managing cybersecurity teams and vendors, and ensuring compliance with industry standards such as NIST CSF 2.0 and IEC 62443.

The candidate will work closely with the CIO, executive leadership, plant operations, engineering teams, and external partners to build a secure and resilient cybersecurity environment.

Key Responsibilities

Cybersecurity Strategy & Architecture

Define and implement enterprise cybersecurity strategy, architecture, and security roadmaps.
Develop target-state security architecture covering IT, cloud, identity, and operational technology (OT).
Lead cybersecurity initiatives across Azure, Microsoft 365, SAP S/4

HANA, Databricks, and enterprise commercial platforms.
Implement Zero Trust security principles across enterprise infrastructure and applications.
Evaluate, select, and implement cybersecurity solutions, including SIEM, SOAR, EDR/XDR, IAM, and cloud security platforms.
Perform threat modeling and security assessments using frameworks such as STRIDE.
Establish security standards, policies, reference architectures, and governance processes.

OT/ICS Cybersecurity

Lead cybersecurity initiatives for Operational Technology (OT) and Industrial Control Systems (ICS) environments.
Secure industrial systems, including DCS, SIS, APC, historians, utilities, and marine systems.
Design and implement IT/OT network segmentation using the Purdue Model.
Apply IEC 62443 security standards, including zones and conduits.
Implement secure remote access solutions for third‑party vendors, OEMs, and plant engineering teams.
Establish OT asset inventory, vulnerability management, patching, backup, and change management processes.
Collaborate with plant operations, engineering, EPC contractors, and OEM vendors to ensure secure construction-to-operations handover.

Security Operations & Incident Response

Establish and manage Security Operations Center (SOC) capabilities, including MSSP/MDR partnerships.
Implement and oversee SIEM, SOAR, EDR/XDR, and threat detection solutions.
Develop incident response procedures, escalation processes, and security playbooks.
Conduct cybersecurity tabletop exercises, including IT and OT incident scenarios.
Lead vulnerability assessments, penetration testing coordination, and remediation activities.
Monitor security threats, investigate incidents, and improve organizational security posture.

Risk Management, Compliance & Governance

Establish cybersecurity governance and risk management frameworks.
Align security controls with NIST Cybersecurity Framework (CSF) 2.0 and IEC 62443.
Ensure compliance with applicable U.S. maritime, LNG, and critical infrastructure security requirements.
Manage third‑party, vendor, and supply‑chain cybersecurity risk assessments.
Prepare the organization for regulatory audits, compliance reviews, and cybersecurity insurance assessments.
Maintain security policies, risk registers, audit documentation, and remediation plans.

Executive Stakeholder Management

Act as a cybersecurity advisor to the CIO, COO, CFO, and plant leadership.
Communicate cybersecurity risks, vulnerabilities, and…