OT Security Architect

Posted 2 days 1 hour ago by National Grid plc

Permanent
Not Specified
Factory Jobs
Warwickshire, Warwick, United Kingdom, CV344
Job Description

Press Tab to Move to Skip to Content Link

Select how often (in days) to receive an alert:

In order to support and enable the Big Work and the dramatic shift in today's cyber-risk landscape, our security decision-making and implementation processes are shifting from centrally controlled, stage-gated, waterfall approaches to more decentralized and agile methods. Instead of being confined to a centralized authority, risk decisions are to be made at the edge by delegated CISOs using agile processes and cyber judgment.

To facilitate this shift, cybersecurity requires scalable processes that can effectively handle conflicts, excess residual risks, and exception requests. These processes should be able to provide hands-on support at the speed required by the business.

The Global CISO is embracing an approach that involves centrally creating cybersecurity policies and capabilities with input from delegated CISO's. These policies and capabilities are then adapted locally into standards, guidelines, and operating procedures. The "what" is defined centrally, while the "how" is resolved locally.

National Grid is hiring an OT Security Architect on a permanent basis. The location for this role can be based in Warwick or London - We offer a hybrid working model.

Job Purpose

Our vision is to be recognized as a world leading Information Technology and Digital function in the energy sector and a trusted partner across National Grid businesses. In the OT Security Architect role, you will play a crucial role in ensuring our Operational Technology (OT) is secure and protected against cyber threats. Your expertise will help identify potential risks and vulnerabilities specific to OT environments and develop effective mitigation strategies. By providing guidance and support, you will contribute to our vision of being a world-leading Information Technology and Digital function in the energy sector.

What you'll do
  1. Providing security guidance and support to projects and programs in OT environments.
  2. Defining and owning the security scope and architecture for various OT projects.
  3. Driving security requirements, architectures, patterns, and approaches in OT systems including substations.
  4. Collaborating with project teams to ensure OT solutions comply with security requirements and manage risks.
  5. Removing impediments for successful delivery of security-related OT initiatives.
  6. Providing technical security input as required by the security policy lead in OT environments.
  7. Coordinating technical design and review activities within the Security team.
  8. Identifying and addressing key risks and issues in OT systems.
  9. Conducting risk assessments to identify cyber threats and vulnerabilities in OT environments.
  10. Conducting supply chain assurance for suppliers and reviewing vendor contracts.
  11. Developing and implementing strategies to mitigate cyber risks in OT systems.
  12. Staying updated with the latest cyber threats and recommending OT security controls.
  13. Maintaining documentation and reporting on security-related activities in OT environments.
  14. Reviewing substation architectures ensuring risk is understood.
  15. Participating in shaping technical specifications to drive the implementation of security within the organisation.
  16. Facilitating Cyber Informed Engineering inspired assessments of engineering plant to drive iterative improvement in specifications and designs.
About you
  1. Bachelor's degree in a relevant discipline or equivalent combination of education, training, and experience.
  2. 5 or more years of related experience.
  3. Strong analytical and problem-solving skills specific to OT environments.
  4. Effective communication and teamwork abilities.
  5. Ability to work in a fast-paced and autonomous environment.
  6. Experience collaborating with colleagues and suppliers in different time zones.
  7. Familiarity with IEC 61850, IEC 62443 and similar OT and cybersecurity standards.
  8. Familiarity with training such as GIAC Response and Industrial Defense (GRID).
  9. Familiarity with engineering environments such as electrical substations.
  10. Familiarity with Failure Effect Mode Analysis (FMEA) or similar.
  11. Stakeholder-centric and willing to balance business benefits and security needs in a critical environment.
  12. Willingness to travel on occasion to Factory Acceptance Tests and operational sites.
What you'll get

A competitive salary between £64,000 - £77,000 - dependent on capability.

As well as your base salary, you will receive a bonus of up to 15% of your salary for stretch performance and a competitive contributory pension scheme where we will double match your contribution to a maximum company contribution of 12%. You will also have access to a number of flexible benefits such as a share incentive plan, salary sacrifice car and technology schemes, support via employee assistance lines and matched charity giving to name a few.

More Information

The closing date for this vacancy is 23rd of April. However, we encourage candidates to submit their applications as early as possible and not to wait until the published closing date. National Grid's recruitment periods can and may vary. We reserve the right to remove this advert or close it to further applications at any point during the recruitment process.

DE & I statement

At National Grid, we work towards the highest standards in everything we do, including how we support, value and develop our people. Our aim is to encourage and support employees to thrive and be the best they can be. We celebrate the difference people can bring into our organisation, and welcome and encourage applicants with diverse experiences and backgrounds, and offer flexible and tailored support, at home and in the office. Our goal is to drive, develop and operate our business in a way that results in a more inclusive culture. All employment is decided on the basis of qualifications, the innovation from diverse teams & perspectives and business need. We are committed to building a workforce so we can represent the communities we serve and have a working environment in which each individual feels valued, respected, fairly treated, and able to reach their full potential.