Cyber Security Team Lead - LNG

iShare•Houston, TX

4d•Onsite

About The Position

The Cyber Security Team Lead will establish, lead, and manage the enterprise cybersecurity program for an LNG export facility transitioning from construction to commercial operations. The role covers enterprise cybersecurity strategy and architecture, IT/OT security, cloud security, identity management, security operations, risk and compliance, and team and vendor leadership. The position works with the CIO, executive leadership, plant operations, engineering teams, and external partners to build a secure and resilient environment aligned with standards including NIST CSF 2.0 and IEC 62443.

Requirements

10+ years of overall cybersecurity experience.
4+ years of experience in cybersecurity architecture and strategy.
2+ years of experience leading cybersecurity teams, projects, or programs.
Hands-on experience securing OT/ICS environments in LNG, oil and gas, petrochemical, energy, or critical-infrastructure industries.
Strong knowledge of IEC 62443, NIST CSF, and the Purdue Enterprise Reference Architecture.
Practical experience with IT/OT network segmentation and industrial cybersecurity.
Strong experience with Microsoft Azure, Microsoft 365, Entra ID, Microsoft Defender, and Microsoft Sentinel.
Experience with SOC operations, SIEM/SOAR, EDR/XDR, incident response, and vulnerability management.
Experience developing cybersecurity target architectures, strategies, and multi-year roadmaps.
Strong knowledge of identity and access management, Zero Trust, cloud security, and enterprise risk management.
Excellent communication, leadership, stakeholder-management, and executive-presentation skills.
Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience.
Must be eligible to obtain a TWIC card and pass applicable background checks.

Nice To Haves

CISSP, CISM, CCSP, GICSP, GRID, or ISA/IEC 62443 certifications.
Experience with OT security platforms such as Claroty, Nozomi Networks, and Dragos.
Experience securing DCS/SIS industrial control environments.
Knowledge of SAP S/4HANA, ETRM, commercial trading platforms, Databricks, and AI/data platforms.
Experience with greenfield plant implementation, LNG facility start-up, or construction-to-operations transition.
Previous consulting or cybersecurity advisory experience with CIOs, CISOs, and plant leadership.

Responsibilities

Define and implement enterprise cybersecurity strategy, architecture, and security roadmaps, including target-state architecture across IT, cloud, identity, and OT.
Lead cybersecurity initiatives across Azure, Microsoft 365, SAP S/4HANA, Databricks, and enterprise commercial platforms; implement Zero Trust principles; and evaluate and implement security solutions.
Establish security standards, policies, reference architectures, governance processes, and threat-modeling and security-assessment practices.
Lead OT/ICS cybersecurity initiatives and secure industrial systems including DCS, SIS, APC, historians, utilities, and marine systems.
Design and implement IT/OT network segmentation using the Purdue Model and IEC 62443 zones and conduits.
Implement secure remote access for third-party vendors, OEMs, and plant engineering teams; establish OT asset inventory, vulnerability management, patching, backup, and change-management processes.
Work with plant operations, engineering, EPC contractors, and OEM vendors on secure construction-to-operations handover.
Establish and manage SOC capabilities, including MSSP/MDR partnerships; oversee SIEM, SOAR, EDR/XDR, threat detection, incident response procedures, escalation processes, and security playbooks.
Conduct cybersecurity tabletop exercises, coordinate vulnerability assessments and penetration testing, lead remediation, investigate incidents, and improve the security posture.
Establish cybersecurity governance and risk-management frameworks; align controls with NIST CSF 2.0 and IEC 62443; and address applicable U.S. maritime, LNG, and critical-infrastructure security requirements.
Manage third-party, vendor, and supply-chain cybersecurity risk assessments; prepare for audits, compliance reviews, and cybersecurity insurance assessments; maintain policies, risk registers, audit documentation, and remediation plans.
Advise the CIO, COO, CFO, and plant leadership; communicate risks and mitigations in business terms; develop investment plans; and provide updates on performance, risk exposure, and program maturity.
Build, manage, and mentor cybersecurity engineers and security analysts; lead recruitment, performance management, training, and professional development.
Manage cybersecurity vendors, MSSPs, MDR providers, and consulting partners; define operational KPIs, SLAs, and service-delivery expectations; and promote cybersecurity awareness and security integration into enterprise projects.
Establish and obtain executive approval for a cybersecurity strategy, target architecture, and three-year roadmap; complete IT and OT asset inventory and implement network segmentation.
Establish secure vendor remote access before plant start-up; implement 24/7 security monitoring and incident response across IT, cloud, and OT; align controls with NIST CSF 2.0 and IEC 62443; achieve audit readiness with no outstanding high-severity findings; and build an internal team and MSSP/MDR partnerships.