Purpose of the job:
Organize and manage Operational Technology (OT) Cybersecurity activities during Project.
Key accountabilities:
- The OT Cybersecurity Manager/Engineer is the point of contact of the Project for cybersecurity related subjects. He oversees the following activities:
- Establish the project Cybersecurity Management Plan for OT cybersecurity.
- Analyze Project security needs (including laws and local regulations), determine security objectives and main security risks strategy
- Design & develop lifecycle-oriented framework to manage cyber risks across the entire rail ecosystem using TS 50701.
- Demonstrated ability to implement, maintain, and ensure compliance with OT cybersecurity standards, frameworks, and regulatory requirements, including ISO 27001, IEC 62443, NIST Cybersecurity Framework (CSF), and TS 50701, throughout the project lifecycle.
- Plan security activities within development life cycle, estimate costs and duration, their impacts related to project execution, Identify training needs
- Is responsible for Cost / Quality / Delay of Project Cybersecurity deliverables, as needed per Project context :
- Cybersecurity context, and Cybersecurity Risk Analysis based on IEC 62443
- Cybersecurity Architecture definition and requirement allocation
- Cascading of requirement to suppliers, Manage Third Parties Risks,
- Application of Cybersecurity Assurance Level
- Definition of Cybersecurity Operating Procedures
- Evaluation of the Project achieved Cybersecurity level
- Follow cybersecurity architecture and design during project execution which includes,
- Analyse requirements and follow-up of technical solution in-line with cybersecurity design directives and project contractual requirements
- Follow-up on design, implementation and maintain cybersecurity architecture on projects. Collaborate across traditional engineering functions.
- Support evaluation of COTS products in line with project needs (e.g. syslogger, IDS, IPS, firewall, SIEM, etc.).
- Participate to design reviews with cybersecurity point of view and challenge technical choices.
- Obtain agreement from Project/Customer about on the set of security measures to be implemented
- Manage vulnerabilities and Cybersecurity issues and actions plan,
- Manage Project Cybersecurity related communication,
- Report on Project Cybersecurity status
- In case of external Cybersecurity audit, manage the relationship with auditors Establish lessons learned.
Key Job Authorities and Dimensions:
- Responsible of the QCD of its project Cybersecurity Work Package
- Functional animation of Cybersecurity Engineer team (typically from 1 to 5)
Performance measurements:
- No "NO GO" for Cybersecurity reasons in Gate Reviews
- Quality of Cybersecurity deliverables, in time
- Achievement of Project targeted level of Cybersecurity
- Assessment findings : Low rework due to external or internal assessments
- Vulnerability management is in place
- Respect of Cybersecurity activities QCD commitment
- Cybersecurity issues/incident resolution
Experience
Mandatory:
- Experience with direct responsibility for hands on architecture, design, development
- Experience related to Cybersecurity in general, deployment experience of security technologies.
- QCD Management
- IEC62443
- SCADA
- CENELEC TS 50701
Competencies & Skills:
- Engineering Background with 6-14 years of experience. Previous hands-on experience with architecture, design and development.
- Knowledge of main Cybersecurity standards and regulations, such as: ISO 27001, 62443, NIST, TS 50701
- Knowledge of some Cybersecurity solutions and areas (authentication and encryption, network access control, intrusion detection, etc.)
- Methods of Cybersecurity risk analysis
- Architecture concepts and techniques of systems and networks, operating systems and associated programming languages.
- Knowledge of security products and protocols
- Knowledge of the main techniques for evaluating systems security
- Strong documentation (written) and presentation (verbal) skills
- Ability to communicate effectively with internal and external stakeholders.
- Dynamic, autonomous. Creativity and ability to work in a complex environment.
Educational & Certifications
Mandatory:
- University/ Engineer in degree level.
Desirable:
- Cybersecurity certification such as: GICSP, CISSP, GSEC, CISM
Pay: Up to ₹2,400,000.00 per year
Benefits:
- Health insurance
- Internet reimbursement
- Life insurance
- Provident Fund
Ability to commute/relocate:
- Bengaluru, Karnataka: Reliably commute or willing to relocate with an employer-provided relocation package (Preferred)
Application Question(s):
- What is your current CTC?
Experience:
- OT Cybersecurity: 5 years (Required)
Location:
- Bengaluru, Karnataka (Required)
Work Location: In person
