OT Cyber Security Manager

Westinghouse Electric Company, LLC • Warrendale, OR

2d • Hybrid

About The Position

As an Operational Technology (OT) Cyber Security Manager you will lead a cross functional team to evolve, innovate and standardize cyber security programs and security product line across the Global Instrumentation & Control organization. The position will require direct management and continuous development of knowledge workers to achieve an improved security posture and reduce risk in Westinghouse's global deployment of Operational Technology projects across the Nuclear Power Industry. You will report to the Controls and Information System Engineering Senior Director. You will be hybrid reporting out of Warrendale, Pennsylvania. Please note that relocation assistance is not provided for this position.

Requirements

• Bachelor's degree in engineering (Electrical or Computer), Information Technology Management, Computer Science or Cyber Security.
• Minimum of 5+ Years of managerial experience in Operational Technology / Information Technology with 5 Years experience leading a large-scale cyber security program.
• Be granted 10 CFR 73.56 Trustworthy and Reliability Clearance for US Nuclear Plant Entry
• Professional certifications, such as CISSP, GIAC (GSTRT, GLEG, GSLC, GPEN), OSCP, or other applicable technical certifications showing area of expertise from qualified and reputable vendors and certification agencies.
• Experience interpreting Security Control & Program Frameworks such as NIST 800-53, NIST 800-82r2, 20 Critical controls, ISO 27001 & 27002, NEI-08-09, NEI 13-10 into Cybersecurity Program, Policy & Procedures.
• Experience with important information security technologies such as SIEM, firewalls, intrusion detection/prevention systems, vulnerability assessment, encryption, identity and access control systems, anti-malware, and security event analysis
• Broad Knowledge of operational technologies (Distributed Control Systems, Safety Systems, Security Systems), systems and networks and typical gaps that could affect the ability of an organization to detect and respond to cyber-attacks.
• Foundational knowledge in information technology, to include hardware, networking, architecture, protocols, files systems and operating systems.

Responsibilities

• Lead the global resource team to create, maintain and execute cyber security programs & plans which address customer regulatory licensing commitments (10 CFR 73.54, Reg Guide 5.71, ISO/IEC 27001, etc), and continuously improve the security posture of Westinghouse Operational Technology deliverables which are deployed to the Nuclear Industry. Help develop and maintain OT policies & standards based on knowledge of best practices and compliance requirements collaborating with Cybersecurity Operations, IT business partners, Internal Audit, Legal, Corporate Security, External Auditors, and other stakeholders. Manage the annual review of policies and standards.
• Responsible for the effective operations of the team, and ensures standards of quality (including effective management of the corrective action & operating experience program), product cost standardization (including utilization of resources to meet assigned targets), safety (both ensuring a NSCWE as well as personnel and Industrial safety), reliability, and performance are met in production processes.
• Responsible for all aspect of personnel development and management, in close cooperation with the technical leader(s) in the team. Supported by experienced professionals who exercise latitude and independence in assignments. Maintain OT Team Development Plan to ensure working knowledge of applicable cyber security frameworks, laws, standards & technology used across the global Nuclear Industry.
• Establish and manage the yearly plans and budgets for capital expenses, internal audits, operations support, resource training and product innovation for the GIC cyber security team. Includes resource demand planning to execute project and internal demands.
• Manage Operational Technology threat management, secure software development, vulnerability management, and incident response capabilities across Westinghouse Global Instrumentation & Control System products.
• Collaborate with Westinghouse Management for Operational Technology Cyber Security Incident Response, and manage interface with customers, and regulatory agencies (e.g., Nuclear Regulatory Commission)) as appropriate, for oversight of the OT Cyber Security Programs).
• Establish & Manage Cyber Security Periodic Quality Audit program to identify and implement corrective actions in the Westinghouse OT cyber security program, collaborate with the relevant IT teams to ensure the Ongoing Monitoring and Assessment activities listed in the Cyber Security Plan are completed within the required periodicity.
• Foster relationships with and use the value of center-led support organizations including Human Resources, Supply Chain Management and Global Operations Services.

Benefits

• Comprehensive Medical benefits which could include medical, dental, vision, prescription coverage and Health Savings Account (HSA) with employer contributions options
• Wellness Programs designed to support employees in maintaining their health and well-being including Employee Assistance Program providing support for our employees and their household members
• 401(k) with Company Match Contributions to support employees' retirement
• Paid Vacations and Company Holidays
• Opportunities for Flexible Work Arrangements to promote work-life balance
• Educational Reimbursement and Comprehensive Career Programs to help employees grow in their careers
• Global Recognition and Service Programs to celebrate employee accomplishments and service
• Employee Referral Program

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Number of Employees: 5,001-10,000 employees