Information Security Operational Technology and Industrial Control System Specialist

About the role

As the Information Security Operational Technology and Industrial Control System Specialist, you will implement and govern the cybersecurity framework for Operational Technology (OT) and Industrial Control System (ICS) environments. You will establish oversight mechanisms that guide how OT systems are designed, secured, monitored, and operated at the Port, while partnering closely with Electronic Technicians (ET) who implement and maintain those systems. You will set design and operating specifications by translating information security architectural guidance and standards into actionable OT/ICS security requirements and implementation checklists for ET/OT teams. You will oversee risk management by validating that OT systems and networks are implemented and operating in accordance with approved security architectures, standards, and baselines. You will track emerging OT/ICS threats and vulnerabilities and recommend required control or configuration changes. You will perform and coordinate OT-focused risk assessments, vulnerability assessments, and compliance reviews. You will support regulatory, audit, and compliance activities by providing control evidence and risk documentation. You will review vulnerability scan results and audit findings, prioritize remediation based on operational and safety impact, and track remediation to closure with ET teams. You will lead the cybersecurity coordination during OT incidents including direct containment and isolation actions, coordinate with ET for system-level changes, patching, or restoration, and ensure evidence collection and documentation. You will identify systemic security gaps in OT network zoning, segmentation, and trust boundaries and bring forward remediation plans aligned to architect guidance. You will provide security consultation to OT projects and changes, ensuring alignment with enterprise security architecture before implementation.

Responsibilities

• Implement and govern the cybersecurity framework for OT and ICS environments.
• Establish oversight mechanisms for OT system design, security, monitoring, and operation; partner with Electronic Technicians (ET).
• Set design and operating specifications by translating security architectural guidance into actionable OT/ICS requirements and checklists for ET/OT teams.
• Oversee risk management by validating OT systems and networks comply with approved security architectures, standards, and baselines.
• Track emerging OT/ICS threats and vulnerabilities; recommend control