Job Title : Logistics Specialist

ManpowerGroup; Johannesburg; On-site; ZAR 600,000 - 800,000; Full time

Job summary

A recruitment services company in Johannesburg is seeking an experienced professional to manage the lifecycle and security of OT field devices. The role involves collaboration with security teams, management of vulnerabilities, and ensuring compliance with industry standards. Candidates should have at least 3 years of experience in OT device management and relevant qualifications. Strong communication and project management skills are essential.

Qualifications

• At least 3 years of experience in OT device management.
• Strong understanding of security best practices for OT devices.
• Experience with threat detection and management tools.
• Knowledge of industry-recognized training in OT device management.

Responsibilities

• Manage the lifecycle of OT field devices.
• Ensure security of OT devices and implement corrective actions.
• Collaborate with security teams to assess organizational exposure.
• Maintain an accurate OT asset database.

Skills

OT device management

Security best practices for OT devices

Threat detection and management tools

Project management skills

Communication skills

Firmware updates management

Collaboration with cross-functional teams

Packet inspection and CVE analysis

Education

Matric / Grade 12

3-year IT-related degree

CompTIA Security+

CCNA / CCNP Security

Certified OT Security Practitioner (ISA / IEC 62443)

Tools

Microsoft Defender for IoT

Claroty

Dragos

Schneider EBO

PME software

Job description

Detail :

MAIN FUNCTIONS OF THE JOB

• Manage the lifecycle of OT field devices (e.g. HVAC, power meters, fire detection, telemetry equipment), planning for and managing of end-of-life replacement projects.
• Manage the security of OT field devices (e.g. HVAC, power meters, fire detection, telemetry equipment), ensuring devices are hardened and securely configured.
• Monitor and action alerts from OT cybersecurity platforms and maintain integrations with external threat feeds including CISA vulnerability and advisory notifications :
• Subscribe to and track CISA ICS Advisories, Known Exploited Vulnerabilities (KEV) Catalog, and Alerts (AA).
• Translate relevant CISA guidance into action plans for patching, network segmentation, or threat mitigation.
• Collaborate with security teams to assess organizational exposure to newly published threats.
• Maintain an accurate, regularly updated OT asset database with vulnerability metadata and firmware status mapped to threat advisories.
• Ensure secure communication protocols (BACnet / IP Secure, Modbus / TCP with authentication, MQTT with TLS, secure NTP) are correctly implemented and monitored.
• Validate firmware updates and patches against current CISA and OEM advisories before deployment; develop rollback plans as needed.
• Align OT operations with global cybersecurity standards (IEC 62443, ISO27001, NIST CSF) and maintain robust change control and documentation.
• Create, maintain, and share incident response documentation for OT-specific vulnerabilities, referencing external advisories like CISA's.

SKILLS REQUIREMENT

• At least 3 years of experience in OT device management, including managing firmware updates, patching vulnerabilities, and managing communication protocols such as BACnet, Modbus, MQTT, and NTP.
• Strong understanding of security best practices for OT devices, including ISO27001.
• Experience with threat detection and management tools such as "Microsoft Defender for IoT", "Claroty", and "Dragos".
• Knowledge of industry-recognized training in OT device management.
• Ability to work collaboratively with cross-functional teams, including BMS engineers, IT security teams, and vendors.
• Excellent communication and problem-solving skills.
• Strong project management skills and the ability to manage multiple projects simultaneously.
• Experience in configuring devices on industry-recognized software such as Schneider EBO and PME, as well as on internally developed software and web applications.
• Knowledge of encryption standards such as TLS / SSL.
• Implement corrective actions promptly to mitigate the negative effects of system changes.
• Packet inspection, CVE analysis, asset management
• Understanding of CISA alert classifications, vulnerability severity scoring (e.g., CVSS), and mitigation practices.
• Ability to coordinate with internal cybersecurity teams and external vendors to assess and implement technical controls.

QUALIFICATIONS AND EXPERIENCE

• Matric / Grade 12 (essential)
• 3-year IT-related degree (preferred)
• Cybersecurity / Networking certification(s) preferred :
• CompTIA Security+, GICSP, CCNA / CCNP Security
• Certified OT Security Practitioner (ISA / IEC 62443)
• Threat intelligence or ICS-CERT awareness training
• Familiarity with CISA’s cybersecurity advisories, threat bulletins, and mitigation techniques.
• Strong understanding of secure networking principles and OT network zoning.

SHEQ, INFORMATION SECURITY, LEGAL AND OTHER REQUIREMNTS AND OBLIGATIONS

• Employees to demonstrate commitment to the requirements of the Integrated Management System by :
• Taking reasonable care for the health and safety of himself / herself, others and the workplace.
• Obeying all stipulated company rules, policies and procedures in compliance to the Occupational Health and Safety Act 85 of 1993, the Health & Safety Management Program, ISO 27001, ISO 9001, ISO 14001, ISO 50001 and ISO 45001 Standards.
• Report all unsafe or unhealthy conditions and threats that come to his / her attention that may affect persons or the business.
• Ensuring the preservation of confidentiality, integrity and accessibility of information for the company and our respective clients.
• Committing to the implementation and maintenance of our Quality Management System.
• All company employees are responsible for the quality of their work and the protection of company and client information.
• Committing to the implementation and maintenance of our Health, Safety and Environmental statutory and regulatory compliance and performance.
• Committing to the implementation and maintenance of our Energy Management System, energy related statutory and regulatory compliance and performance.
• Committed to the protection of personal information and POPIA or other relevant statutory and regulatory compliance and performance.

PLEASE NOTE THAT ONLY SHORTLISTED CANDIDATES WILL BE CONTACTED.