OT Cybersecurity Engineer (Operational Technology)

• Location: Paris, France (Office Based)
• Work Schedule: Monday to Friday (Full-time)
• Duration: 12 months (renewable)

Our Company:

Airswift takes pride in being an international workforce solutions provider.  With 9,000 contractors operating in over 70 countries, Airswift's geographical reach, experience and expertise across the oil and gas, energy, mining, infrastructure and technology sectors is unparalleled.

We are seeking a committed OT Cybersecurity Engineer to work in a 12-month contract with the possibility of extension.

Primary location: Paris Operating Centre.

Other locations: Short missions may be required to be performed outside of your home country or, in exceptional cases, commit to a long-term expatriation on a construction site.

Job Description:

Our client’s Cyber Security department serves as the internal center of excellence, responsible for defining, implementing, and enforcing security across the entire enterprise, covering both IT and critical Operational Technology (OT) environments across the globe.

The CSE department manages the entire cyber security lifecycle, including Cyber Risk Management, Compliance and Assurance, Cyber Security Architecture and Engineering, Security Operations, Cyber Awareness as well as active role in delivering solutions to our customers.

Job Scope:

Before Our Industrial Projects:

The OT CSE is not involved normally in the Proposal phase (or tendering), when the commercial offers are being emitted to potential customers, targeting at tentative Projects (prospects).

However, some Information Security Project Managers can call a spot intervention exceptionally for an expert discussion.

Inside Our Industrial Projects:

(Under the supervision of one Information Security Project Manager)

• OT Cyber Security instantiated through Vendors Management: consuming the majority of your working time, the OT Cyber Security activities will lead you to defining the requirements, participating to the selection of OT product suppliers, onboarding them, following up their actions to fulfill their contractual requirements inside our business Projects, and finally testing the solutions manufactured by the product suppliers.
• OT Cyber Security expertise: despite the OT Cyber Security activities involve before everything Vendors Management capabilities, the successful candidate will also be called to act as an expert, especially in these fields: organizing OT Risk Assessment workshops, reviewing architecture designs proposed by OT product suppliers, consolidating an overall plant network architecture, or generally presenting and answering questions about the series of standards ISA/IEC 62443.
• Project Sequences & Processes: despite not in charge of project management activities (the Information Security Project Manager is), the OT CSE will need to master the Project Sequences & Processes. Inside the company these concepts are sometimes very formal and can leverage various software applications in their implementation. The OT CSE can be assigned to various sizes and types of Projects, requiring a capacity to adjust.
• Industrial systems / engineering context: in contrast to an IT network that integrates standard components (mail servers, file servers, etc.), OT networks rely on specific (sometimes, vendor-proprietary) systems which serve the chemical and physical transformation process taking place inside the plant, or support safety services related to them. The successful candidate shall master them in order to take their particularities into account during the decision process while cyber security aspects are considered.

Applicable Project Phases:

• Essentially Engineering, Procurement, Commissioning.

Reporting Line:

• Operation hierarchy: reports to Information Security Project Manager, so indirectly inside the Project organization, to Project Manager / Director or Proposal Manager (or equivalent).
• Functional hierarchy: reports to Head of Information Security in Business Projects.

Key Interactions:

• Internally: reporting lines, Project/Proposal members, other Cyber Security functions, other IT functions.
• Externally: representatives from customers, vendors and construction subcontractors, auditors, regulatory organizations.

Main Responsibilities:

Before Our Industrial Projects:

It is not common, but can exceptionally occur, that the OT CSE is involved in the Proposal phase (or tendering), when the commercial offers are being emitted, targeting new Projects to be awarded.

Inside Our Industrial Projects:

• Vendors Management:

• Technical and non-technical Projects’ documentation writing (procedures, technical specifications, test scenarios).
• Selection of OT product suppliers.
• Management of deviations to requirements.

Cyber Security Expert Activities:

• Technical advice to OT product suppliers and other stakeholders (like other Engineering disciplines).
• Risk Assessment workshops as per the series of standards ISA/IEC 62443.
• OT architecture design as per the series of standards ISA/IEC 62443 (including Zones & Conduits).
• Review of architecture and asset inventories proposed by OT product suppliers.
• Technical test sessions (Factory Acceptance Tests, Site Acceptance Tests).

Stakeholders Management with a technical focus:

• Representatives from other Engineering Disciplines (especially: Instrumentation, Telecom, Rotating Equipment, Electrical).
• Representatives from OT product suppliers.
• Representatives from Clients.
• Formal communication channels: document management from the team itself or from the OT product suppliers (including using electronic document management systems).

Spot Activities:

As requested by the Information Security Project Manager inside each Project (audit, incident management, training to OT product suppliers on a construction site, etc.).

Education and Experiences:

• Engineering diploma or equivalent, preferentially in Cyber Security, or even better, in the industrial Cyber Security specialization.
• Professional certifications in the Cyber Security fields will be a plus. Recommended particularly: ISA/IEC 62443 or equivalent.
• You have a minimum of 5 years of experience in either Cyber Security, Information Technology, Operations Technology (through its various disciplines).
• You have ideally an experience in the Energy sector or a similar industrial one.

Key Skills:

• Speak English fluently, as this will be the shared language with your colleagues and most customers.
• You are at ease in multicultural environments.
• Ability to coordinate alternatively with technical roles (engineers, from Cyber Security or not: Electrical, Instrumentation, Telecom, etc.) is required.
• Excellent verbal and written communication skills.
• You are at ease working with plenty of documents, reading or writing them, may they be technical.
• specifications, procedures or contracts.
• Customer and business-oriented (we sell services).
• Contract and cost-minded.
• Autonomous and problem-solving mindset.

The next step

We have an exceptional team in place, and we are pleased to be able to appoint a further person to our growing business. We are aware that you may not ‘tick all the boxes’, but if you believe you can genuinely offer some valuable skills and experience to our business, please in the first instance contact our recruitment partner Airswift.

For further information please apply with your updated CV or email Mariana Cortez at mariana.cortez@airswift.com

#LI-MC1