Cybersecurity IT_OT Manager (m/f/d)

Randstad Portugal; Sines; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

Randstad Digital in Sines seeks a Cybersecurity IT_OT Manager to lead security, risk, and compliance activities in a hybrid model (4 days on-site, 1 day remote per week). You will support incident investigations, define standards, and coordinate with IT/OT security teams and senior management on policy and control implementations.

The role requires English proficiency and extensive experience in enterprise security architecture, procedures, and training, with a focus on continuity, risk

Qualifications

• Experience in enterprise security architecture design.
• Experience in enterprise security procedure creation.
• English proficiency for reading, writing, and speaking.
• Experience managing security controls and incident response.

Responsibilities

• Support incident investigation and remediation for security violations.
• Define security standards and ensure regulatory compliance.
• Coordinate with IT/OT security and management on policies and controls.
• Lead PMO efforts for multi-year security programs and risk management.

Skills

Leadership

Communication

Risk management

Team management

Strategic thinking

Problem solving

Project management

Education

University degree in Computer science

Tools

F5 load balancer

Cisco network supervision tools

Dynatrace

VMware

Hyper-V

RPA tooling

VPN technologies

Firewall management

Job description

Randstad Digital is hiring a Cybersecurity IT_OT Manager for direct integration, in a company located in Sines.

Hybrid work model (4 days on-site; 1 days remote / week).

Support Our client's Business Owners in the investigation and remediation of incidents/violations.

Communicate security awareness and develop wide understanding of the existing Security Standards and local regulatory requirements.

Perform security and system performance operations/monitoring activities.

Collaborate with IT/OT Security Officer in the definition of technical and non-technical IT security procedures defined in Our client's policies and Security Standards in place.

Collaborate with IT/OT Security Officer in the revision and monitoring of compliance with the policy statements and contribute to Internal Audit and Risk Management operations.

Liaise with internal Management functions when appropriate (typically Quarterly Local Security Committees).

Coordinate and liaise with Our client's Senior management, Regional, Group and external stakeholder in the event of an incident, disaster, or crisis.

STRATEGIC decision and action on standards, weekly planning, project management requirement:

• Define and maintain standards for quality, safety, and compliance.
• Ensure compliance with relevant regulations and laws.
• Establish best practices and guidelines for all aspects of the organization's operations.
• Develop and implement weekly plans to ensure the successful execution of projects and initiatives.
• Set priorities and allocate resources to achieve strategic goals.
• Monitor progress and adjust plans as needed.
• Plan, execute, and manage projects to achieve business objectives.
• Identify and manage risks and issues.
• Monitor project performance and communicate progress to stakeholders.
• Support in overseeing Security Requirements for new solutions (as cloud service, emerging technology) requirements, part of the Security by Default standards in place.
• Oversee the security and monitoring operations performed by the Local Security Officer and/or local IT security team.
• Act as PMO regarding current multiyear Security Standards programs (IT and OT).

RISK & COMPLIANCE management on Operation, Monitoring, and Investigation as following:

• Ensure compliance with policies, procedures, and regulations.
• Identify and assess operational risks and implement controls to mitigate them.
• Continuously monitor operations to identify and address potential issues.
• Monitor compliance with laws, regulations, and industry standards.
• Identify and analyse risks and trends.
• Report findings to senior management and recommend corrective actions.
• Conduct investigations into potential violations of policies, procedures, or laws.
• Collect and analyse evidence to determine the root cause of the issue.
• Develop and implement corrective actions to prevent future occurrences.
• Drafting and submission of incident reports to CNCS within legal deadlines.
• The support for the CNCS platform registration and annual external reporting.

One or more of the following certifications:

• GIAC Security Essentials Certification
• GIAC Security Leadership Certification
• ISACA Certified Information Security Manager
• Microsoft Certified Systems Engineer: Security
• (ISC)2 SCCP
• (ISC)2 CISSP
• (ISC)2 ISSAP
• ISO 27001/27002
• Cisco IOS Network Security

Experience in enterprise security architecture design.

Experience in enterprise security procedure creation.

Design and deliver employee security awareness training.

Develop Business Continuity Plans and Disaster Recovery Plans based on ISO 24762

Experience in administering IT security controls in an organization.

Working technical knowledge of infrastructure, networks, databases, and systems in relation to IT Security and IT Risk.

Familiarity with Investigative and analytical techniques, procedures, and requirements.

Mandatory Proficiency in English for reading, writing, and speaking.

Solid background in Network Administration.

In-depth experience in Cisco network supervision tools and component.

Proven hands-on with F5 load balancer or similar load balancing technology

Knowledge and experience in Routing, Switching, TShot, VPN, FW (Cisco, Check Point, Palo Alto, Fortinet).

Firewall configuration (Cisco, Check Point, Palo Alto, Fortinet)

Knowledge of networks, technologies, and security protocols (Radius, IPv4/IPv6, NAT, DNS, DHCP, Outdoor Wireless, IPS/IDS).

Solid understanding of Switching and Multicast.

Solid knowledge in Virtualization (Hyper-V, VMware)

Knowledge in Dynatrace, monitoring and other troubleshooting scanning tool.

Welcome knowledge in usage of RPA on proactive networking monitoring.

Knowledge in advanced technology solution as Fluidmesh.Good problem-solving, analysis capability and investigation mindset.

Strategic thinking and capability of operationalizing daily basis tasks and hands-on approach.

Teamwork and collaboration skills.

Excellent communication and interpersonal skills.

Responsibility, accountability, Integrity, and Reliability.

Agility and ability on fast response and resolution time.

Customer centricity and service mindset.

Excellent communication and leadership skills.

Organizational and time-management skills.

Decision-making skills.

Problem-solving and learning agility.

High ability on managing leadership and stakeholders in local, regional and global layers.

Experience in team management/leading role.University degree in Computer science and/or several years equivalent work experience.

Project Management skills (preference for proven PMP certification)

Cybersecurity Certifications.

Compliance and Risk Certifications.