Cybersecurity Operational Technology Senior Advisor from Mattson Resource Group

Westminster, CA 92685

About the Job

Job Description Primary Location : US-CA-Westminster
Description
In this job, you’ll play a critical role in for designing and implementing robust cybersecurity architectures for our emerging Operational Technology (OT) environments, with a focus on ensuring the security and resilience of critical infrastructure systems. Your knowledge of industry standards and protocols such as, IEC 61850, NERC CIP-013, IEEE 2030.5, and SCADA will be instrumental in safeguarding our OT assets from cyber threats.

Design and implement secure OT cybersecurity architectures, including network segmentation, access controls, and encryption mechanisms, in accordance with industry standards such as IEC 61850, IEEE 2030.5 and NERC CIP-013.
Apply your knowledge of systems architecture, risk identification and mitigation strategies to reduce risk, and apply zero trust design principals for integrated solution designs to ensure a defensible architecture is established.
Conduct threat modeling exercises to identify risk and identify potential Cybersecurity risks and vulnerabilities in OT systems. Develop mitigation strategies to address identified risks and enhance the overall security posture.
Stay abreast of emerging cybersecurity standards, guidelines, and best practices relevant to OT environments. Incorporate industry best practices into cybersecurity architecture designs and implementation plans.
Conduct architecture reviews and security assessments of IT systems, applications, and infrastructure to identify security gaps and weaknesses. Provide recommendations for remediation and improvement.
Coordinate security testing and evaluation activities, including penetration testing, vulnerability assessments, and security audits, to validate the effectiveness of cybersecurity controls and identify areas for improvement.
Collaborate with cross-functional teams, including OT engineers, IT security specialists, and compliance professionals, to integrate cybersecurity requirements into OT projects and initiatives. Communicate effectively with stakeholders to convey cybersecurity risks, recommendations, and status updates.

Qualifications

The essentials

Ten (10) or more years of Cybersecurity experience.
Five (5) or more years of OT Cybersecurity experience
Experience in cybersecurity frameworks and standards such as NIST Cybersecurity Framework, ISO/IEC 27001, CIS Controls, and GDPR.

The preferred

Experience with enterprise architecture frameworks (e.g., TOGAF).
Bachelor’s Degree or higher in Cybersecurity, Electrical Engineering, Computer Science, Information Systems, or related field of study.
Experience with implementing OT cybersecurity, with a focus on designing and implementing Cybersecurity architectures for critical infrastructure systems.
Strong analytical and problem-solving skills with the ability to analyze complex cybersecurity challenges, evaluate solutions, and make informed recommendations.
Excellent written and verbal communication skills, with the ability to effectively communicate technical concepts to non-technical stakeholders. Strong presentation skills for delivering cybersecurity architecture reviews, recommendations, and reports to senior leadership.
Possesses one or more of the following Information Security certifications: CISSP, GSEC, CRISC, GREM, GNFA, CCNA, or Certified Information Security Manager (CISM). Additional certifications in enterprise architecture (e.g., TOGAF, Zachman) are highly desirable.

You should know

This position’s work mode is hybrid. Further details of this work mode will be discussed at the interview stage. The work mode can be changed based on business needs.
The primary work location for this position is Westminster, CA. However, the successful candidate may also be asked to work for an extended amount of time in Irvine, Rosemead or Pomona, CA (alternate work locations).
Position could require up to 40% traveling and being out in the field throughout the SCE Service territory (locations listed above).
This position has been identified as a NERC/CIP impacted position - Prior to being hired, the successful candidate must pass a Personnel Risk Assessment (PRA) or Background Investigation. Once hired, the candidate must complete specified training prior to gaining un-escorted access to assigned work location and performing necessary job duties.
Candidates for this position must be legally authorized to work directly as employees for any employer in the United States without visa sponsorship.
US Citizenship required as part of Critical Infrastructure security protocols.
Relocation may apply to this position.

Salary

160,000 - 190,000 /year