IT Security Strategist

An experienced Technology Security Manager is sought to lead and manage the Technology Security function. This role requires an individual with expert experience in managing both IT and OT security systems.

The successful candidate will define the security strategy, make critical technology security decisions, and implement a robust security program aligned with industry standards such as ISO 27001 and ISA/IEC 62443.

Security Strategy and Planning:

• Develop an enterprise-wide security strategy to assess and mitigate risks.
• Collaborate with leadership to integrate OT principles into future capital projects.
• Ensure compliance with internal and third-party security assessments for both IT and OT systems.

Operational Security Management:

• Prepare an annual IT & OT security operational plan/roadmap to ensure alignment with security strategy and goals.
• Lead the day-to-day management of IT & OT security operations, including access control, asset management, threat monitoring, incident response, vulnerability management, and security awareness training.
• Maintain visible communication with management, executive leadership, and the board on a regular basis.

Policies and Procedures:

• Establish and maintain IT & OT security policies, procedures, and frameworks based on industry standards.
• Ensure compliance with ISO 27001 certification and NIS2 (EU Network and Information Security Directive).
• Oversee the deployment, configuration, and maintenance of security technologies and tools for IT and OT systems.
• Enhance the operational resilience of IT & OT assets through incident response, disaster recovery, and business continuity planning.

Incident Response and Management:

• Identify, report, and control security incidents, continuously monitor for both internal and external threats.
• Conduct vulnerability assessments and penetration testing to evaluate weaknesses in the enterprise.
• Adapt the security program to mitigate emerging threats.
• Manage security incidents centrally to ensure consistency in response, and prepare post-incident reports for senior management and the board.

Leadership and Team Development:

• Build, mentor, and collaborate with IT & OT security professionals, ensuring they stay updated with security best practices.
• Support the continuous professional development of the IT & OT security team.
• Participate in the performance management process to ensure the team's objectives are met and the security strategy is executed effectively.