Senior/OT Cyber Engineer (Cyber Capability & Engineering)

About the role

The role is accountable for building up the cybersecurity capability for MPA and the Maritime sector, acting as the subject matter expert in cybersecurity with a focus on operational technology (OT). It involves leading technical studies, implementing OT cybersecurity initiatives and advising senior leadership.

Key responsibilities

• Lead technical studies on the existing and future OT cybersecurity scope and deepen understanding of cybersecurity services and technologies.
• Develop and lead the implementation of OT cybersecurity initiatives tailored to the Maritime sector.
• Work with MPA divisions to develop OT cybersecurity guidelines, templates, security requirements, network reference architecture and training and awareness programmes.
• Review cyber security architecture, conduct cyber risk, vulnerability and penetration testing for OT systems, with emphasis on minimising disruption to critical information infrastructure.
• Support security monitoring of OT systems and maintain compliance with cybersecurity requirements and good practices.
• Lead and support project management across planning, execution, testing, validation and delivery.
• Keep up with industry practices and emerging threats, advise the CTO and CISO and recommend controls and solutions.

Required profile

• At least 3 years of experience with OT security (e.g. OT Purdue model, OT network security, OT protection, OT probes such as Claroty, Nozomi).
• Experience deploying or supporting security practices such as risk and vulnerability assessments, antivirus, firewalls, intrusion detection systems and centralised alert logging and monitoring in OT environments, preferably in the Maritime sector.
• Able to lead projects involving multiple stakeholders.
• Certifications in product management or cybersecurity (e.g. CISSP).
• Good command of English and strong verbal and written communication skills.

Required skills

• Knowledge of regulatory requirements and security standards such as NIST 800-82, ISO 27001 and IEC 62443.
• Strong analytical, interpersonal and teamwork skills.