Cybersecurity Technology Architect V, Operational Technology; OT Security

Role:
Cybersecurity Technology Architect V, Operational Technology (OT) Security

Location:

Hybrid, Oakland, CA.

Duration: 12 months

Work Location:

Hybrid Onsite – onsite presence required as needed.

Seeking a Cybersecurity Technology Architect V, Operational Technology (OT) Security to lead risk assessment and security policy for the organization’s operational technology environment, including Industrial Control Systems (ICS), SCADA systems, PLCs, surveillance/camera systems, and wireless or other network-connected field devices. This role owns the OT risk domain end to end — from technical vulnerability assessment to security policy development and regulatory alignment.

• Serve as liaison between the Cybersecurity Department and regulatory agencies on matters of OT security.
• Participate in and lead steering committees focused on OT security initiatives.
• Provide strategic guidance and direction for the OT risk components of the operating plan and budget.
• Lead enterprise-wide OT cybersecurity strategy roadmaps.
• Maintain a detailed, living risk portfolio describing the aggregated OT-related risk posture across business units.
• Conduct consequence-based risk assessments on Industrial Control Systems (ICS), SCADA systems, and PLCs to uncover vulnerabilities.
• Conduct risk assessments on surveillance/camera systems, wireless devices, and other network-connected field devices.
• Develop and implement OT-specific security policies aligned with standards such as NIST 800-82.

• Education:
  
  B.S. degree in Computer Science, Information Systems, or a related field, or equivalent experience.
• Experience:
  
  8+ years of combined IT, critical infrastructure, intelligence, and/or cyber/information security work experience, with direct experience in operational technology security.
• Certification:
  CompTIA Security+, SANS, Cisco, GIAC, Microsoft Security, or an equivalent certification.
• Effective communicator with peers and clients; able to balance business priorities while remaining customer-focused.
• Multi-platform knowledge (UNIX/Linux, Windows Servers/Desktops, Cisco hardware, etc.).
• Ability to influence and lead behavior change across technical and business stakeholders.
• Strong analytical, critical thinking, and decision-making skills.
• Solid understanding of critical business processes and application, system, and network security, including ODN and UDN.
• Advanced knowledge of cyber/information security management policies, procedures, regulations, and governance processes; information systems/network security; system security analysis; and information assurance compliance.
• Advanced knowledge of applicable and accepted security standards and frameworks (NIST, ISO, etc.) and regulatory/compliance requirements such as SOX, NERC CIP, CCPA, HIPAA, and NRC.
• Advanced knowledge of performing cybersecurity and compliance assessments.

• Education:
  
  Master’s degree in Computer Science or a job-related discipline, or equivalent experience.
• Utility industry experience.
• Experience assessing surveillance/camera systems, wireless access points, or other network-connected field devices.
• Certification: CISSP, CISM, CRISC, CISA, or equivalent.
• Tools and Technologies:
• Frameworks & Standards: NIST 800-82, NIST Cybersecurity Framework, ISO, SOX, NERC CIP, CCPA, HIPAA, NRC
• Operational Technology:
  Industrial Control Systems (ICS), SCADA, PLCs
• Connected Devices:
  Surveillance/camera systems, wireless access points, network-connected field devices

Platforms: UNIX/Linux, Windows Servers/Desktops, Cisco hardware.