Reporting to the Senior Manager, Cybersecurity; primarily focus on securing Industrial Control Systems (ICS), IoT and IIoT.
Implement projects, coordinate cyber security assessments, and create/update cyber security policies and procedures.
Provide guidance to teams on security issues requiring remediation and obtain approvals from senior management.
Build relationships with site personnel and maintain communication with OT and IT personnel at plant sites and corporate offices.
Develop and deliver ICS Security Policies, Standards and Procedures based on industry standards, regulations, and best practices.
Assist in determining and implementing solutions surrounding centralized support models with ICS/OT principles.
Perform risk analyses on initiatives and new technologies and provide customized recommendations to improve security posture.
Collaborate with business and technical stakeholders (including OT engineers) to develop and implement infrastructure, standards and procedures.
Stay current with developing IoT/IIoT technologies and best practices and develop architecture guidance to securely connect IoT/IIoT to enterprise and cloud applications.
Assist with developing security plans, designs, and guidelines for remediating security risks in ICS/OT environments.
Chair and facilitate working committees.
Identify, design, and help implement new security technologies and solutions in the ICS and DMZ environments and guide teams to deploy them.
Conduct ICS/OT cyber security risk assessments and complete on-site visits in support of assessments.
Design and present monthly security awareness presentations to IT/OT personnel.
Examine and authorize firewall rule requests prior to implementation in ICS/OT environments.
Research and stay current with new ICS/OT security technologies and solutions.
Work with and guide team members to build SOPs and triage events and alerts from security technologies in ICS/OT environments.
Requirements
Post-secondary Degree or Technical Diploma is preferred and six or more years of related experience.
Ability to apply cyber security skills across a broad range of cybersecurity domains.
Experience developing and implementing cyber security projects in an ICS environment.
SANS GSEC and GICSP certifications are preferred.
A thorough knowledge of industrial control systems, internet of things, industrial internet of things, cyber security, and an awareness of threats and malicious activities as they pertain to ICS and IoT/IIoT.
Knowledge of ICS Cyber Security frameworks, standards, and guidelines.
Understating of the importance of developing and maintaining relationships with facility personnel.
Excellent communication skills and technical writing skills.
A customer focused attitude that enables the business to operate effectively in a secure manner.
Ability to educate and coach other OT and IT staff members on ICS cyber security issues.
Previous experience in similar ICS projects/environments.
Previous experience working with remote facilities/developing relationships with remote facilities.
Previous experience working with technical OT site personnel.
In accordance with Nutrien policies, you will be required to undergo a background check, and may be required to undergo a substance test.
Applicants must meet minimum age requirements, as permitted by law.