Apply on Employer Site

McCormick & Company · 12 hours ago

OT Cybersecurity Specialist (HYBRID)

Hunt Valley, MD

Full-time

Hybrid

Entry, Mid Level

$74K/yr - $130K/yr

2+ years exp

McCormick & Company is a leader in herbs, spices, seasonings, and condiments, and they are looking for a dynamic OT Cybersecurity Specialist to join their team. In this pivotal role, you will maintain an Operational Technology asset inventory and implement cybersecurity measures to ensure the security of their systems while collaborating with global teams.

Food Processing

No H1B

Hiring Manager

Nirmit Parikh, MBA

Responsibilities

Coordinate Security Actions: Plan and monitor security measures, collaborate with the Cybersecurity Team, and implement vital security recommendations

Act as Main Point of Contact: Handle security requests, coordinate responses with internal teams and partners, and assist with OT cybersecurity queries from internal partners and vendors

Manage Vulnerabilities and Non-Conformities: Identify, analyze, and monitor vulnerabilities, determine appropriate patches or controls, create report vulnerabilities status and coordinate timely corrective actions

Implement OT Cybersecurity Controls: Support asset owners with the implementation and maintenance of OT cyber controls, ensuring compliance with all standards and policies for new equipment and projects

Update Security Dashboards and Indicators: Maintain comprehensive reports and dashboards on security status and compile indicators for monitoring incidents and vulnerabilities

Maintain an OT Asset Inventory: Regularly update the inventory based on changes in the OT environment, monitor inventory status, and investigate any anomalies to coordinate corrective actions

Other Duties: Take on additional tasks within the OT space as needed

Collaborate cross-functionally with other technology teams, service providers and the security organization

Maintain all cybersecurity diagrams, inventories, and documentation

Analyze business requirements and propose solutions that meet standards, compliance, and operational needs

Qualification

Network/telecom architecturesInformation system security governanceRisk analysis methodologiesIEC 62443ICS security practicesPLCDCSSISHMISCADAISO 27001Vulnerability assessmentsLeadership abilitiesInterpersonal skillsCommunication skills

Required

Bachelor's degree in Engineering, Information Technology, Computer Science or relevant field

Technical knowledge of: Network/telecom architectures and infrastructures applied to industrial systems, information system security governance processes, risk analysis methodologies, IEC 62443, IEC 61850, NIS, NIST, ISO 27001,27002,27005 and ENISA standards, automated industrial process control systems

Proven leadership abilities, excellent interpersonal and communication skills, and the ability to influence and drive change

Minimum of 2 years control systems security background with relevant previous experience in a technical or consulting environment

Experience with ICS systems and ICS security industry practices with exposure to Operational technologies

Minimum 2 years with supporting PLC, DCS, SIS, HMI or SCADA systems

Experience supporting and troubleshooting industrial protocols such as OPC, Modbus TCP, EthernetIP, Profinet

Comprehensive working knowledge of one or more of the following: IEC 62443/ISA 99, ISO 27001, NIST SP 800-82, CPNI Good Practice

Experience deploying or supporting security practices and technologies in ICS environments such as risk or vulnerability assessments, EDR/antivirus software, firewalls/segmentation, intrusion detection systems, centralized alert logging and monitoring