Analyst Sr, OT Cybersecurity - Carnival Global Brand

ESSENTIAL FUNCTIONS:

• Perform security monitoring and preventive functions for Operational Technology (OT) networks, critical systems, applications, and databases.
• Maintain the Configuration Management profile of all OT systems
• Perform assessments of OT systems to ensure compliance with Global cybersecurity guidelines, standards, and requirements.
• Enforce the implementation of all corporate security policies and procedures along with LAN security strategies, Sarbanes-Oxley, HIPPA, PCI compliance, and IMO regulations.
• Review system logs and alerts related to possible security incidents. Prepare and analyze incident investigation reports in accordance with defined investigation procedures and under the general direction of Information Security Management.
• Monitor security-related websites to possess knowledge of common exploits, vulnerabilities and countermeasures. Escalates any high-risk security threats to Information Security management.
• Evaluate and implement data security systems to ensure the protection data against unauthorized use, access, interruption, disclosure, accidental or intentional loss.
• Enforce security standards on network devices, endpoints, and hardened Operating Systems including enterprise applications, and databases.
• Provide technical guidance and manage the aspects of information protection in complex OT network environments.
• Deploy technology implementation strategies for OT environments understanding the key differentiators between IT and OT.
• Develop and implement methods for management and control of access to information resources, and provide in-depth technical assistance relating to the design and implementation of security and controls for networks, distributed systems and operating system platforms.
• Develop methods to ensure the integrity, confidentiality, and availability of information resources.
• Provide on-call rotation services to respond to critical alerts or user administration escalations.
• Perform other information security system functions, as assigned by the Information Security Manager/ Supervisor.

• This position requires a minimum of 5 years' experience evaluating and implementing data security systems to ensure the protection of association data against unauthorized use, access, interruption, disclosure, accidental or intentional loss of data.

• Bachelor's degree or equivalent related technical experience.
• CISSP certification is required (CCNA/MCSE certification is strongly preferred) or other relevant security qualification such as SANs SEC487, GCIA, GCIH, GCDA, GPEN, etc.
• Experience working with networking systems such as switches, routers, and firewalls is a must.
• Experience working with Anti-virus, DLP, web filtering, IDS/IPS, vulnerability scanners, forensics tools, MDM, SEIM, DB monitors, and e-mail filters is required.
• Understanding of OT infrastructure, IOC, PCN, ICS, DCS, PLCs, SCADA, SIS, HMIs, Windows, UNIX, Linux, Unisys, and related technology.
• Knowledge and experience with vulnerability scanning and penetration testing analyses.
• Familiarity with VINS, GPS, AIS, Radar systems, electronic charts is a plus.
• Excellent oral and written communication skills.
• Interpersonal skills at a level to function well in a wide range of administrative and management environments and a strong image of professional discipline.