Industrial Control Systems; ICS Director

Industrial Control Systems (ICS) Director

Our client is a global technology organization transforming how they work. They align with their businesses to deliver innovative solutions that address specific business challenges, integrate processes, and create great experiences. They connect their work to shared goals that propel the firm forward in the Digital Age and imagine how technology can advance the way they work by using disruptive technology.

We are looking for forward-thinking technologists that can accelerate our focus areas such as building stronger foundational technology capabilities, reducing complexity, employing digital transformation concepts, and leveraging disruptive technology.

• With your strong understanding of the relationship between Industrial Controls Systems (ICS) and associated threats and vulnerabilities, security architecture, and cloud/merger and acquisition security strategy, in the context of risk management, you will have the opportunity to strategize with business partners in a global organization with over 45,000 employees.
• Our newly-created opportunity will partner you with a strong understanding of risk-based decision making, demonstrated communication skills in an environment to evolve and develop the organizational overall approach and direction for the security architecture, emerging technology (cloud and M&A), and ICS security programs.
• The person in this role will serve as the leader for defining and implementing an approach to security architecture, the incorporation of security principles into cloud and emerging technologies, and securing the confidentiality, integrity, and availability of the ICS environment.

• ICS Security Architecture:
  • Establishes an enterprise-wide information security architecture strategy and reference architecture, including standards and frameworks that are aligned with the overall business strategy.
  • Develops, updates, and maintains a security architecture roadmap and corresponding reference architecture elements to guide the business in developing solutions that utilize repeatable patterns.
  • Integrate IT/OT systems development with security policies and information protection strategies.
  • Serves as an information security architecture subject matter expert to the business, providing expertise as needed.
  • Monitors security vulnerabilities, threats, and events in network and host systems.
  • Updates and maintains the enterprise security architecture to mitigate current and emerging threats.
  • Develops, implements, and maintains required disaster recovery architecture.
  • Develops and maintains business continuity plans and procedures, ensuring RTOs and RPOs are appropriately identified, tracked, and monitored.
  • Develops a cloud security strategy and maintains overall data center operations.
  • Develops and maintains an enterprise security tool rationalization and alignment process.
  • Responsible for M&A integration planning for network and security architecture.
• Industrial Controls System Security:
  • Leads efforts to align the appropriate information technology initiatives with business directives and requirements.
  • Acts as a focal point for OT security investigations and directs a full investigation with recommended courses of action.
  • Prepares financial forecasts for ICS security operations.
  • Leads in strategic planning for the deployment of information security technologies and program enhancements in the OT ICS environment.
  • Facilitates the process control security working group, which connects representatives from the corporate engineering, information technology, and mills teams together.

• In-depth knowledge of network protocols, routing, VLAN, switching, etc.
• Experience as a system security administrator; in particular, the technologies in use at the firm.
• System and application vulnerability expertise.
• Network and system security architecture expertise.
• Cloud and emerging technology expertise.
• Extensive knowledge of key governance frameworks, including ISO 27001, NIST, COBIT, and ITIL, Purdue Enterprise Referenced Architecture, and ISA 62443.
• Extensive knowledge of key regulations and/or contractual obligations, including HIPAA, PCI, Sarbanes Oxley, GLBA, and SOC/SSAE
  16 and CIP Standards.
• At least 10 years of security-related IT experience with at least 4 years securing ICS environments, including any of the following but not limited to:
  Internet of Things (IOT) security, network administration, network security, server administration, system security, endpoint security, vulnerability, patch management, Microsoft Active Directory, and programming.
• Bachelor's Degree (Master's Degree preferred) or in related field of study, including any of the following but not limited to:
  Information Systems, Network Engineering, or Information Security.
• Certifications in related field, including any of the following but not limited to:
  Security +, Network +, CISSP, CCNA Security, CCIE, MCSE, MCITP, SANS GICSP, and CISM.