Apply on Employer Site

Westinghouse Electric Company · 1 day ago

OT Cyber Security Manager

Warrendale, PA

Full-time

Hybrid

Senior Level

5+ years exp

Westinghouse Electric Company is a leader in the global nuclear energy industry, dedicated to providing clean energy solutions. The Operational Technology (OT) Cyber Security Manager will lead a team to develop and standardize cyber security programs across the organization, ensuring compliance and improving security posture in the Nuclear Power Industry.

Electrical DistributionEnergyNuclear

No H1B

U.S. Citizen Only

Responsibilities

Lead the global resource team to create, maintain and execute cyber security programs & plans which address customer regulatory licensing commitments (10 CFR 73.54, Reg Guide 5.71, ISO/IEC 27001, etc), and continuously improve the security posture of Westinghouse Operational Technology deliverables which are deployed to the Nuclear Industry. Help develop and maintain OT policies & standards based on knowledge of best practices and compliance requirements collaborating with Cybersecurity Operations, IT business partners, Internal Audit, Legal, Corporate Security, External Auditors, and other stakeholders. Manage the annual review of policies and standards

Responsible for the effective operations of the team, and ensures standards of quality (including effective management of the corrective action & operating experience program), product cost standardization (including utilization of resources to meet assigned targets), safety (both ensuring a NSCWE as well as personnel and Industrial safety), reliability, and performance are met in production processes

Responsible for all aspect of personnel development and management, in close cooperation with the technical leader(s) in the team. Supported by experienced professionals who exercise latitude and independence in assignments. Maintain OT Team Development Plan to ensure working knowledge of applicable cyber security frameworks, laws, standards & technology used across the global Nuclear Industry

Establish and manage the yearly plans and budgets for capital expenses, internal audits, operations support, resource training and product innovation for the GIC cyber security team. Includes resource demand planning to execute project and internal demands

Manage Operational Technology threat management, secure software development, vulnerability management, and incident response capabilities across Westinghouse Global Instrumentation & Control System products

Collaborate with Westinghouse Management for Operational Technology Cyber Security Incident Response, and manage interface with customers, and regulatory agencies (e.g., Nuclear Regulatory Commission)) as appropriate, for oversight of the OT Cyber Security Programs)

Establish & Manage Cyber Security Periodic Quality Audit program to identify and implement corrective actions in the Westinghouse OT cyber security program, collaborate with the relevant IT teams to ensure the Ongoing Monitoring and Assessment activities listed in the Cyber Security Plan are completed within the required periodicity

Foster relationships with and use the value of center-led support organizations including Human Resources, Supply Chain Management and Global Operations Services

Qualification

Cyber Security ManagementOperational TechnologyNuclear Industry ComplianceCISSP CertificationNIST FrameworksInformation Security TechnologiesIncident ResponseBudget ManagementTeam LeadershipCommunication Skills

Required

Bachelor's degree in engineering (Electrical or Computer), Information Technology Management, Computer Science or Cyber Security

Minimum of 5+ Years of managerial experience in Operational Technology / Information Technology with 5+ Years experience leading a large-scale cyber security program

Be granted 10 CFR 73.56 Trustworthy and Reliability Clearance for US Nuclear Plant Entry

Professional certifications, such as CISSP, GIAC (GSTRT, GLEG, GSLC, GPEN), OSCP, or other applicable technical certifications showing area of expertise from qualified and reputable vendors and certification agencies

Experience interpreting Security Control & Program Frameworks such as NIST 800-53, NIST 800-82r2, 20 Critical controls, ISO 27001 & 27002, NEI-08-09, NEI 13-10 into Cybersecurity Program, Policy & Procedures

Experience with important information security technologies such as SIEM, firewalls, intrusion detection/prevention systems, vulnerability assessment, encryption, identity and access control systems, anti-malware, and security event analysis

Broad Knowledge of operational technologies (Distributed Control Systems, Safety Systems, Security Systems), systems and networks and typical gaps that could affect the ability of an organization to detect and respond to cyber-attacks

Foundational knowledge in information technology, to include hardware, networking, architecture, protocols, files systems and operating systems

Benefits

Comprehensive Medical benefits which could include medical, dental, vision, prescription coverage and Health Savings Account (HSA) with employer contributions options

Wellness Programs designed to support employees in maintaining their health and well-being including Employee Assistance Program providing support for our employees and their household members

401(k) with Company Match Contributions to support employees' retirement

Paid Vacations and Company Holidays

Opportunities for Flexible Work Arrangements to promote work-life balance

Educational Reimbursement and Comprehensive Career Programs to help employees grow in their careers

Global Recognition and Service Programs to celebrate employee accomplishments and service

Employee Referral Program