Cybersecurity IT_OT Manager

PSA Sines, S.A.; Sines; Presencial; EUR 70 000 - 110 000; Tempo integral

Resumo da oferta

A PSA Sines, S.A. procura profissional de cibersegurança para liderar a estratégia de segurança da informação. A função envolve implementar um programa de segurança empresarial, governança da diretiva NIS2 e o plano mestre IT/OT, com reporte regular à administração.

O candidato ideal possui certificações de segurança, experiência em arquitetura de segurança empresarial e gestão de continuidade de negócios, com forte capacidade de liderança e comunicação.

Qualificações

• Certificações em segurança da informação são desejadas.
• Experiência comprovada em arquitetura de segurança empresarial.
• Desenvolver procedimentos de segurança corporativos e treinamentos.
• Desenvolver planos de continuidade de negócio e recuperação de desastres.
• Gestão de controles de segurança de TI e monitorização de infraestruturas.

Responsabilidades

• Desenvolver e implementar programa de cibersegurança empresarial.
• Gestão da implementação da diretiva NIS2, incluindo governança e responsabilidade.
• Gerir o Master Plan de Cybersegurança IT/OT.
• Conduzir avaliações de risco e gestão de riscos.
• Fornecer relatórios regulares sobre a segurança de IT/OT à diretoria.
• Responsável pela conformidade e domínio de risco de IT.

Conhecimentos

Security architecture

Security procedures

Employee security training

Business continuity planning

Disaster recovery planning

IT security controls

Networking knowledge

Cisco networking

Load balancing

Monitoring tools

Virtualization

Investigation skills

RPA monitoring

Formação académica

Licenciatura em Ciências da Computação

Ferramentas

Cisco network tools

Dynatrace

F5 load balancer

Descrição da oferta de emprego

Descrição de emprego:

• Develop and implement an enterprise-wide cybersecurity program to protect the organization's data and systems from cyber threats, such as hacking, data breaches, and malware, according to NIS2 Directive and PSA IT&OT Group Standards.
• Responsible and accountable for the NIS2 Directive Implementation including Governance & Personal liability
• Manage and deploy IT/OT Cybersecurity Master Plan.
• Perform risks assessments and risk management processes.
• Provide regular feedback reports on IT/OT Infra security to the local board of directors and business stakeholders.
• Overall responsibility and accountability for Compliance and Risk IT related domain.

Job role function (mission)

• Develop and implement an enterprise-wide cybersecurity program to protect the organization's data and systems from cyber threats, such as hacking, data breaches, and malware, according to NIS2 Directive and PSA IT&OT Group Standards.
• Responsible and accountable for the NIS2 Directive Implementation including Governance & Personal liability
• Manage and deploy IT/OT Cybersecurity Master Plan.
• Perform risks assessments and risk management processes.
• Provide regular feedback reports on IT/OT Infra security to the local board of directors and business stakeholders.
• Overall responsibility and accountability for Compliance and Risk IT related domain.

Main Responsibilities

• Support PSA Business Owners in the investigation and remediation of incidents/violations.
• Communicate security awareness and develop wide understanding of the existing Security Standards and local regulatory requirements.
• Perform security and system performance operations/monitoring activities.
• Collaborate with IT/OT Security Officer in the definition of technical and non-technical IT security procedures defined in PSA’s policies and Security Standards in place.
• Collaborate with IT/OT Security Officer in the revision and monitoring of compliance with the policy statements and contribute to Internal Audit and Risk Management operations.
• Liaise with internal Management functions when appropriate (typically Quarterly Local Security Committees).
• Coordinate and liaise with the PSA Sines Senior management, Regional, Group and external stakeholder in the event of an incident, disaster, or crisis.
• STRATEGIC decision and action on standards, weekly planning, project management requirement:
  • Define and maintain standards for quality, safety, and compliance.
  • Ensure compliance with relevant regulations and laws.
  • Establish best practices and guidelines for all aspects of the organization's operations.
  • Develop and implement weekly plans to ensure the successful execution of projects and initiatives.
  • Set priorities and allocate resources to achieve strategic goals.
  • Monitor progress and adjust plans as needed.
  • Plan, execute, and manage projects to achieve business objectives.
  • Identify and manage risks and issues.
  • Monitor project performance and communicate progress to stakeholders.
  • Support in overseeing Security Requirements for new solutions (as cloud service, emerging technology) requirements, part of the Security by Default standards in place.
  • Oversee the security and monitoring operations performed by the Local Security Officer and/or local IT security team.
  • Act as PMO regarding current multiyear Security Standards programs (IT and OT).
• RISK & COMPLIANCE management on Operation, Monitoring, and Investigation as following:
  • Ensure compliance with policies, procedures, and regulations.
  • Identify and assess operational risks and implement controls to mitigate them.
  • Continuously monitor operations to identify potential issues.
  • Monitor compliance with laws, regulations, and industry standards.
  • Identify and analyse risks and trends.
  • Report findings to senior management and recommend corrective actions.
  • Conduct investigations into potential violations of policies, procedures, or laws.
  • Collect and analyse evidence to determine the root cause of the issue.
  • Develop and implement corrective actions to prevent future occurrences.
  • Drafting and submission of incident reports to CNCS within legal deadlines
  • The support for the CNCS platform registration and annual external reporting

Desired Profile

• One or more of the following certifications:
  • GIAC Security Essentials Certification
  • GIAC Security Leadership Certification
  • ISACA Certified Information Security Manager
  • Microsoft Certified Systems Engineer: Security
  • (ISC)2 SCCP
  • (ISC)2 CISSP
  • (ISC)2 ISSAP
  • ISO 27001/27002
  • Cisco IOS Network Security
• Experience in enterprise security architecture design.
• Experience in enterprise security procedure creation.
• Design and deliver employee security awareness training.
• Develop Business Continuity Plans and Disaster Recovery Plans based on ISO 24762
• Experience in administering IT security controls in an organization.
• Working technical knowledge of infrastructure, networks, databases, and systems in relation to IT Security and IT Risk.
• Familiarity with Investigative and analytical techniques, procedures, and requirements.
• Mandatory Proficiency in English for reading, writing, and speaking.
• Solid background in Network Administration.
• In-depth experience in Cisco network supervision tools and component.
• Proven hands-on with F5 load balancer or similar load balancing technology
• Knowledge and experience in Routing, Switching, TShot, VPN, FW (Cisco, Check Point, Palo Alto, Fortinet).
• Firewall configuration (Cisco, Check Point, Palo Alto, Fortinet)
• Knowledge of networks, technologies, and security protocols (Radius, IPv4/IPv6, NAT, DNS, DHCP, Outdoor Wireless, IPS/IDS).
• Solid understanding of Switching and Multicast.
• Solid knowledge in Virtualization (Hyper-V, VMware)
• Knowledge in Dynatrace, monitoring and other troubleshooting scanning tool.
• Welcome knowledge in usage of RPA on proactive networking monitoring.

• Knowledge in advanced technology solution as Fluidmesh.Good problem-solving, analysis capability and investigation mindset.
• Strategic thinking and capability of operationalizing daily basis tasks and hands-on approach.
• Teamwork and collaboration skills.
• Excellent communication and interpersonal skills.
• Responsibility, accountability, Integrity, and Reliability.
• Agility and ability on fast response and resolution time.
• Customer centricity and service mindset.
• Excellent communication and leadership skills.
• Organizational and time-management skills.
• Decision-making skills.
• Problem-solving and learning agility.
• High ability on managing leadership and stakeholders in local, regional and global layers.

• Experience in team management/leading role.University degree in Computer science and/or several years equivalent work experience.
• Project Management skills (preference for proven PMP certification)
• Cybersecurity Certifications.

• Compliance and Risk Certifications.

What we offer

Join the PSA Sines Team!

Do you want to work at one of Europe’s most strategic ports? At PSA Sines, we connect Portugal to the world with innovation and sustainability. We are looking for talented people who want to grow with us and contribute to a more efficient and sustainable future.

We offer:

Global impact in the logistics sector

Continuous training and development

A dynamic and collaborative team

Job offer communicated in compliance with quota requirements – Recruitment under Law no. 4/2019.