Cyber Security Team Lead - LNG

iShare Inc•Houston, TX

5d•Onsite

About The Position

The Cyber Security Team Lead will establish, lead, and manage the enterprise cybersecurity program for an LNG export facility transitioning from construction to commercial operations. The role calls for hands-on expertise in cybersecurity architecture, IT/OT security, cloud security, identity management, and security operations in energy, oil and gas, LNG, or critical infrastructure. The lead will develop enterprise security architecture, implement IT/OT security controls, manage cybersecurity teams and vendors, and support compliance with standards including NIST CSF 2.0 and IEC 62443. They will work with the CIO, executive leadership, plant operations, engineering teams, and external partners to create a secure and resilient environment. First-year goals include securing approval for a cybersecurity strategy, target architecture, and three-year roadmap; completing IT and OT asset inventories and network segmentation; establishing secure vendor remote access before plant start-up; implementing 24/7 monitoring and incident response; aligning controls with NIST CSF 2.0 and IEC 62443; achieving audit readiness without outstanding high-severity findings; and building an internal team and effective MSSP/MDR partnerships.

Requirements

10 or more years of overall cybersecurity experience.
At least 4 years of experience in cybersecurity architecture and strategy.
At least 2 years of experience leading cybersecurity teams, projects, or programs.
Hands-on experience securing OT/ICS environments in LNG, oil and gas, petrochemical, energy, or critical infrastructure industries.
Strong knowledge of IEC 62443, NIST CSF, and the Purdue Enterprise Reference Architecture.
Practical experience with IT/OT network segmentation and industrial cybersecurity.
Strong experience with Microsoft Azure, Microsoft 365, Entra ID, Microsoft Defender, and Microsoft Sentinel.
Experience with SOC operations, SIEM/SOAR, EDR/XDR, incident response, and vulnerability management.
Experience developing cybersecurity target architectures, strategies, and multi-year roadmaps.
Strong knowledge of identity and access management, Zero Trust, cloud security, and enterprise risk management.
Excellent communication, leadership, stakeholder management, and executive presentation skills.
Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience.
Must be eligible to obtain a TWIC card and pass applicable background checks.

Nice To Haves

CISSP, CISM, CCSP, GICSP, GRID, or ISA/IEC 62443 certifications.
Experience with OT security platforms such as Claroty, Nozomi Networks, and Dragos.
Experience securing DCS/SIS industrial control environments.
Knowledge of SAP S/4HANA, ETRM, commercial trading platforms, Databricks, and AI/data platforms.
Experience with greenfield plant implementation, LNG facility start-up, or construction-to-operations transition.
Previous consulting or cybersecurity advisory experience with CIOs, CISOs, and plant leadership.

Responsibilities

Define and implement enterprise cybersecurity strategy, architecture, and security roadmaps.
Develop target-state security architecture covering IT, cloud, identity, and operational technology.
Lead cybersecurity initiatives across Azure, Microsoft 365, SAP S/4HANA, Databricks, and enterprise commercial platforms.
Implement Zero Trust principles across enterprise infrastructure and applications.
Evaluate, select, and implement security solutions, including SIEM, SOAR, EDR/XDR, IAM, and cloud security platforms.
Perform threat modeling and security assessments using frameworks such as STRIDE.
Establish security standards, policies, reference architectures, and governance processes.
Lead cybersecurity initiatives for OT and ICS environments, including DCS, SIS, APC, historians, utilities, and marine systems.
Design and implement IT/OT network segmentation using the Purdue Model and IEC 62443 zones and conduits.
Implement secure remote access for third-party vendors, OEMs, and plant engineering teams.
Establish OT asset inventory, vulnerability management, patching, backup, and change management processes.
Work with plant operations, engineering, EPC contractors, and OEM vendors to support secure construction-to-operations handover.
Establish and manage SOC capabilities, including MSSP/MDR partnerships, and oversee security monitoring and threat detection solutions.
Develop incident response procedures, escalation processes, and security playbooks; conduct IT and OT tabletop exercises.
Lead vulnerability assessments, coordinate penetration testing, and manage remediation activities.
Monitor threats, investigate incidents, and improve the organization’s security posture.
Establish cybersecurity governance and risk management frameworks aligned with NIST CSF 2.0 and IEC 62443.
Support compliance with applicable U.S. maritime, LNG, and critical infrastructure security requirements.
Manage third-party, vendor, and supply-chain cybersecurity risk assessments.
Prepare for regulatory audits, compliance reviews, and cybersecurity insurance assessments; maintain policies, risk registers, audit documentation, and remediation plans.
Advise the CIO, COO, CFO, and plant leadership; communicate cyber risks and mitigation strategies in business terms.
Develop cybersecurity investment plans, present recommendations to senior leadership, and provide regular program and risk updates.
Build, manage, and mentor cybersecurity engineers and security analysts; lead recruitment, performance management, training, and professional development.
Manage cybersecurity vendors, MSSPs, MDR providers, and consulting partners; define operational KPIs, SLAs, and service expectations.
Promote cybersecurity awareness and integrate security practices into enterprise projects.