ICS - Cyber Security Solutions Architect

Westinghouse Electric Company; Warrendale (Allegheny County); On-site; USD 90,000 - 150,000; Full time

Job summary

An established industry player is seeking a dynamic ICS Platform Administration Supervisor to lead a small team in enhancing cybersecurity measures. This role involves collaborating with stakeholders to define engineering processes for upgrade projects, managing security risk assessments, and ensuring compliance with regulations. The ideal candidate will have extensive experience in cybersecurity operations, strong leadership skills, and the ability to communicate effectively with diverse teams. If you're passionate about driving security initiatives in a highly regulated environment, this opportunity is perfect for you.

Qualifications

• 5+ years managerial experience in OT/IT, leading cybersecurity programs.
• Proficiency in Enterprise OT Security and cybersecurity regulations.

Responsibilities

• Manage detection, response, and mitigation of cybersecurity incidents.
• Ensure compliance with cybersecurity standards and policies.

Skills

Cybersecurity Operations

Risk Assessment

Incident Management

Leadership

Communication

Teamwork

Problem Solving

Education

Bachelor's Degree in Relevant Field

Relevant Certifications (e.g., CISSP, CISM)

Tools

Security Tools and Technologies

VMware

Job description

Opportunity Overview for ICS Platform Administration Supervisor:

This Supervisor Engineer will be responsible for leadership and collaboration with the customer and Westinghouse stakeholders to define and convey the engineering process requirements for implementing upgrade projects. Additionally, the Lead Engineer will participate in process development, change management, and manage a small team (3-5 people) to ensure customer requirements are met.

What your day-to-day looks like:

1. Secure Operations Management: Enforce policies to ensure compliance with cybersecurity standards. Actively participate in security operations.
2. IT Coordination: Collaborate with IT to manage and improve secure development functions.
3. Security Risk Assessment: Contribute to risk assessments and audits, identifying vulnerabilities.
4. Operational Incident Handling: Manage detection, response, and mitigation of incidents, participating in incident resolution.
5. Vulnerability Management: Participate in vulnerability classification, remediation guidance, and prioritization.
6. Compliance and Policy Enforcement: Ensure adherence to cybersecurity regulations and policies.
7. Documentation: Maintain SOPs, standards, and review exceptions.
8. Security Technology Evaluation: Investigate and recommend security solutions.
9. Technical Guidance: Provide expertise on information security issues.
10. Process Performance: Ensure effectiveness of security processes.
11. Weekly Meetings: Engage actively in secure development meetings.

Additional responsibilities include resolving technical issues during system design and implementation, interfacing with end users and customers, providing cost and schedule estimates, and traveling up to 50% for deployment activities.

What we'd like to see from you:

• Bachelor's degree or equivalent experience in a relevant field with proficiency in Enterprise OT Security.
• Proven cybersecurity operations, risk assessment, incident management, and supervisory experience.
• Strong knowledge of cybersecurity practices, regulations, and standards.
• Hands-on experience with security tools and technologies.
• Excellent communication and teamwork skills.
• Relevant certifications (e.g., CISSP, CISM, Security+).
• Minimum 5+ years managerial experience in OT/IT, including leading large-scale cybersecurity programs.
• Ability to obtain 10 CFR 73.56 Trustworthy and Reliability Clearance.
• Experience with security frameworks (NIST, ISO, NEI) and interpreting them into cybersecurity programs.
• Strong leadership, communication, and risk management skills.

Experience/Requirements:

• At least 10 years in the nuclear industry or a highly regulated industry with increasing responsibilities.
• Experience leading medium to high complexity projects.
• Excellent interpersonal, communication, and leadership skills.
• Familiarity with AP1000 project, network device configuration, virtualization (VMware), and I&C systems.
• Experience with engineering deliverables, processes, and solving complex problems.
• Ability to communicate effectively with management and escalate issues as needed.

Additional Requirements:

Ability to obtain 10 CFR 73.56 Trustworthy and Reliable clearance.

Certifications:

Preferred but not required: GIAC Security Essentials (GSEC), Security+, Network+, or other reputable technical certifications.