This position will be part of the growing Global Cyber Security team supporting manufacturing operations globally. The experienced Cyber Security Supervisor will drive improvement in overall security by designing and engineering resilient, secure solutions and controls and coordinating their implementation across its global manufacturing environment.
This is a hands-on and an individual contributor role for now.
Onsite 5 days a week.
Position Summary:
The Cyber Security Supervisor will be responsible for designing, implementing, and continuously improving cybersecurity controls across the global manufacturing OT environments, including industrial control systems, factory automation systems, and other OT technologies as needed. The role combines OT-security engineering, architecture, technical leadership, and cross-functional partnership to reduce cyber risk while safeguarding personnel, production continuity, and product quality.
Partnering with the regional IT teams, manufacturing plant personnel and the rest of the Global Security Team, they will implement and maintain OT security solutions and ensure all OT related systems are securely configured to protect against current and emerging cyber threats and align with the companies security standards.
Responsibilities:
- Develop and implement security controls for OT assets such as PLCs, RTUs, HMIs, engineering workstations, historians, SCADA systems, DCS platforms, and industrial network equipment.
- Serve as the lead technical subject matter expert (SME) throughout the implementation of OT related security solutions and changes, including defining standard processes and authoring detailed technical guides to enable smooth transition to an operational state.
- Function as a subject matter expert (SME) for the OT security solutions, helping ensure they are managed and maintained in accordance with Crown and industry standards and continue to meet current and future requirements.
- Proactively identify OT related security configuration issues across the enterprise and coordinate timely remediation with minimal operational impact.
- Help maintain accurate inventories of OT assets, including PLCs, RTUs, HMIs, engineering workstations, SCADA servers, and industrial network devices.
- Participate in OT incident response, including triage, containment, recovery, root-cause analysis, and lessons-learned activities.
- Perform vulnerability assessments and support remediation planning for OT systems, considering operational uptime, safety, vendor guidance, and maintenance windows.
Design:
- Define and maintain the target OT cybersecurity architecture, roadmap, standards, and reference designs.
- Work with the Network Security Architect to design secure network segmentation and zoning strategies for industrial environments, aligned with the Purdue Model, ISA-95, and ISA/IEC 62443 principles.
- Conduct OT security architecture reviews, threat modeling, risk assessments, and security gap analyses.
- Identify, assess, and select global OT security related solutions and changes that improve Crown’s OT cybersecurity posture across its global operations.
- Produce detailed designs and implementation plans to ensure new OT security solutions and changes are robust, resilient, and well integrated into Crown’s environment while minimizing operational impact.
Experience:
- 5+ years of experience in OT/ICS engineering, industrial automation, cybersecurity or a related field.
- Experience of designing and/or implementing security controls/solutions for OT, industrial control systems or components (PLC, HMI, SCADA etc)
- Strong practical understanding of industrial control systems and communications protocols, including EtherNet/IP, CIP, S7 communication, Modbus, DNP3, OPC Classic/OPC UA, PROFINET, and BACnet.
- Proficient in OT network architecture and security controls, including network segmentation, firewalls, industrial DMZs, secure remote access, and secure communications.
- Demonstrated ability to identify, assess, and remediate OT related security risks, vulnerabilities, and configuration weaknesses.
- Hands-on experience with OT security platforms such as Nozomi Networks, Claroty, Dragos, Microsoft Defender for IoT, Tenable OT, or comparable technologies.
- Familiarity with major industrial automation vendors and technologies, including Siemens, Rockwell Automation, Schneider Electric, Honeywell, Emerson and GE.
- Experience serving as a technical lead on large-scale projects involving geographically distributed and cross-cultural teams.
- Demonstrated experience defining and implementing security standards, processes, and governance within large corporate IT environments.
- Working knowledge of OT security frameworks and standards, including ISA/IEC 62443, NIST SP 800-82, and the Purdue Enterprise Reference Architecture (PERA).