- Responsible for identifying and assessing OT security gaps in our customers' environment especially industrial control systems (ICS) and then recommend mitigation / remediation solutions.
- Provide regular risk briefing to senior management on the findings (Gaps) and develop remediation approaches.
- Work with the peers from manufacturing / plant, IT infrastructure and other related business teams in designing secure communications both within the internal and external network.
- Responsible for OT security technology (strategies, policies, framework, architectures and roadmaps) implementation based on the business strategy, cybersecurity assessments, IT and OT trends, and the overall threat landscape.
- Responsible on providing specialist consultancy on OT space and its convergence with IT.
- Responsible for embedding the principles of the company's information security policy throughout OT program.
- Responsible for supporting company's OT initiatives with the development of high-level and low-level architecture designs including recommended security controls for complete IT-OT security.
- Deploying or supporting security practices and technologies such as risk or vulnerability assessments, antivirus software, firewalls, intrusion detection systems, centralized alert logging and monitoring in ICS environments.
- Minimum of 2 - 3 years industrial control systems security background with relevant previous experience in a technical or consulting environment.
- Minimum 2 years comprehensive working knowledge of one or more of the following: IEC 62443/ISA 99, ISO 27001, NIST SP
- Fundamental understanding of IT and OT network communication protocols (e.g. TCP/IP, UDP, DNP3, Modbus, IEC61850, OPC, PROFINET, etc.).
- Experience deploying or supporting security practices and technologies such as risk or vulnerability assessments, antivirus software, firewalls, intrusion detection systems, centralized alert logging and monitoring in ICS environments.
- Ability to author technical and non-technical documents for varying audiences from technical automation personnel to senior security or operations personnel.
- Relevant industry or industrial certifications are highly preferred such as SANS GICSP, CISM, CISSP, IEC62443, CCNA, CCNP, etc.
- Strong cloud technology experience is a plus.
- Excellent collaboration, interpersonal and communication (written and verbal) skills.
- English a must. Bahasa Indonesia, Mandarin, and Portuguese language capability will be advantageous.
- On-site travel based on the requirement.
Senior Consultant, OT Security - Kuala Lumpur, Malaysia - Averis
Description
Grow your career with us
Here at Averis, our common purpose is to improve lives by developing resources sustainably. Our people are crucial in helping us to realise our vision to be one of the best Global Business Solution (GBS) organization to support our customers in creating value for the Community, Country, Climate, Customer and Company.
Role Summary:
Delivers managed security services. Deep technical knowledge on several technologies is needed to support management and improvement of activities related to IT security. Work experience: more than 1 yearsResponsibilities:
Requirements:
To be successful in this role, it is recommended that you should have the following skills and qualifications:
When you send us your resume and personal details, it is deemed you have provided your consent for us to keep or store your information in our database. All the information you have provided is only used for the recruitment process. Averis will only collect, use, process or disclose personal information where and when allowed to under applicable laws.
Only shortlisted candidates will be contacted for an interview. We endeavour to respond to every applicant. However, if you receive no response from us within 60 days, please consider your application for this specific position unsuccessful. We may contact you in the future if there are opportunities that match your qualifications and experience. Thank you for considering a career with Averis.