CDCPK Information Security Representative (ISR)

Uniper; Immingham; On-site; GBP 40,000 - 80,000; Full time

Job summary

An established industry player is seeking a dedicated Cyber Security Engineer to enhance their Operational Technology (OT) security framework. This role involves providing expert guidance, developing security documentation, and managing incident response strategies. You will play a crucial role in fostering a culture of cyber security, ensuring compliance with industry standards, and collaborating with various stakeholders. Join a forward-thinking company committed to a Zero Carbon future, where your contributions will significantly impact the safety and integrity of critical systems.

Qualifications

• Educated to a Higher National Certificate/Degree level in Cyber Security or IT Engineering.
• Excellent knowledge of cyber security in an OT environment.

Responsibilities

• Provide cyber security guidance and support for OT security.
• Develop and maintain site security documentation and incident management.

Skills

Cyber Security Knowledge

Interpersonal Skills

IT Systems Understanding

Root Cause Analysis

Networking Fundamentals

Education

Higher National Certificate/Degree in Cyber Security or IT Engineering

Tools

Siemens Control Systems

Allen Bradley Control Systems

Job description

An exciting opportunity to join the Engineering & Maintenance Team at CDCPK, reporting to the Team Leader, you will deliver the execution of Operational Technology (OT) Cyber Security at CDCPK within the framework of the business Information Security Management System (ISMS) across CDC, Killingholme, and the Pipelines. This role is an excellent opportunity for engineers in Uniper's business to further develop in an exciting and supportive environment and support the journey towards a Zero Carbon future.

Your responsibilities

• Provide specialist expert cyber security knowledge and guidance to the wider site team and be the first point of contact for OT security support, issues, and challenges at CDCPK.
• Apply the business Information Security Management System (ISMS) at CDCPK, including local risk management and reporting to the plant executive using business risk tools and reporting systems.
• Develop and maintain site security documentation such as asset inventory registers, backup and restoration procedures, supplier lists, access control lists, network diagrams, and regular reporting PIs/KPIs.
• Manage local incident and OT crisis management by steering backup strategies, recovery plans, and cyber defense plans; support the OT Security Operations Centre (SOC) in investigating and responding to security alerts and incidents.
• Develop and maintain site security technologies and controls, e.g., remote connection, antivirus, application whitelisting, intrusion detection systems, asset management, and user analysis systems.
• Support the Distributed Controls Systems Engineer and Control & Instrumentation Engineers in OT maintenance tasks such as patch management and backups to ensure security and compliance.
• Lead and coordinate ongoing security programs including risk assessments, tabletop exercises, and security testing for site OT equipment.
• Lead stakeholder engagement, making recommendations to management on IT change implementations at CDCPK.
• Proactively support the Cyber Security Culture through exemplary actions and communication.

Your profile

Essential:

• Educated to a Higher National Certificate/Degree level in Cyber Security, IT Engineering, or equivalent, with extensive technical knowledge gained through experience.
• Excellent knowledge of cyber security in an OT environment; familiarity with Siemens and Allen Bradley control systems is advantageous.
• Strong understanding of relevant legislation and standards, such as ISO2700x and IEC 62443.
• Strong interpersonal skills for effective collaboration and communication.
• Positive work ethic with confidence to challenge established practices.
• Ability to work confidentially with senior management.
• High understanding of IT systems, including networking fundamentals, to act as an informed customer for IT.
• Good written communication skills for procedures, reports, and business cases.
• Ability to think rationally and act positively under pressure.
• Proficiency with best practice tools for root cause analysis of engineering issues.
• Understanding of HSE aspects related to external service providers' activities.

Desirable:

• Extensive knowledge of Power Station/Gas Plant operations.
• Proven ability to maximize operational performance.
• Contract management skills for effective stakeholder relationships.
• Experience as Nominated Supervisor and Competent Person under E&M safety rules.