OT Security Specialist-HRK-P1

Alliance Data Systems; Honolulu (HI); On-site; USD 110,000 - 170,000; Full time

Job summary

Alliance Data Systems is seeking an OT Security Specialist to develop, implement, and oversee security policies for OT environments, including SCADA systems and PLCs. The role requires hands-on risk assessments, vulnerability testing, and continuous monitoring of OT networks to prevent incidents.

The candidate should have experience with NERC CIP and ISA/IEC 62443 standards, plus training delivery for OT personnel and a strong incident response mindset.

Qualifications

• Bachelor’s degree in computer science, information security, engineering, or related field.
• Experience in OT security, including risk assessments, vulnerability assessments, and penetration testing.
• Strong understanding of SCADA systems and industrial control systems.
• Familiarity with NERC CIP and ISA/IEC 62443 standards.
• Experience in network traffic monitoring and analysis.
• Certifications such as CISSP, CISM, or GICSP are preferred.

Responsibilities

• Develop, implement, and maintain OT security policies, procedures, and standards.
• Conduct risk assessments, vulnerability assessments, and penetration testing on OT systems.
• Monitor OT network traffic to detect incidents, anomalies, and unauthorized access attempts.
• Design secure architectures for SCADA systems, PLCs, and other ICS/OT components.
• Ensure regulatory compliance with NERC CIP, ISA/IEC 62443 and related standards.
• Develop and deliver security awareness training for OT personnel.
• Conduct regular security audits and coordinate with vendors and third-party providers.
• Stay updated on emerging threats and industry trends to strengthen OT security posture.
• Develop and maintain incident response plans and coordinate responses to OT security incidents.

Skills

OT security experience

SCADA/ICS knowledge

Risk assessments

Vulnerability assessments

Penetration testing

Education

Bachelor’s degree in computer science, information security, engineering, or related field

Tools

NERC CIP

ISA/IEC 62443

Job description

Job Location: Colorado

Key Responsibilities

• Develop, Implement, and Maintain Security Policies: Create and uphold OT security policies, procedures, and standards, ensuring alignment with industry best practices and regulatory requirements.
• Risk and Vulnerability Assessments: Conduct comprehensive risk assessments, vulnerability assessments, and penetration testing on OT systems to identify and mitigate potential security threats and vulnerabilities.
• Network Traffic Monitoring: Monitor and analyze OT network traffic to detect and respond to security incidents, anomalies, and unauthorized access attempts.
• Secure Architecture Design: Collaborate with IT and OT teams to design and implement secure architectures and configurations for SCADA systems, PLCs, and other industrial control systems.
• Regulatory Compliance: Ensure compliance with relevant regulations, including NERC CIP, ISA/IEC 62443, and other applicable standards.
• Security Awareness Training: Develop and deliver security awareness training programs for OT personnel to foster a culture of security and vigilance.
• Regular Security Audits: Conduct regular security audits and assessments to evaluate the effectiveness of security controls and identify areas for improvement.
• Vendor and Third-Party Coordination: Work closely with vendors, contractors, and third-party service providers to ensure the security of OT systems and components.
• Stay Updated on Emerging Threats: Keep abreast of emerging threats, vulnerabilities, and industry trends to continuously enhance the organization's OT security posture.
• Incident Response Planning: Develop and maintain incident response plans and coordinate responses to security incidents affecting OT systems.

Qualifications

• Bachelor’s degree in computer science, Information Security, Engineering, or a related field.
• Proven experience in OT security, including risk assessments, vulnerability assessments, and penetration testing.
• Strong understanding of SCADA systems, PLCs, and other industrial control systems.
• Familiarity with relevant regulations and standards such as NERC CIP and ISA/IEC 62443.
• Experience in network traffic monitoring and analysis.
• Excellent communication and collaboration skills.
• Ability to develop and deliver effective security training programs.
• Strong problem-solving skills and attention to detail.
• Certifications such as CISSP, CISM, GICSP, or equivalent are preferred.