Ph3Role Description /h3pThe OT specialist is responsible for coordinating cybersecurity and operational technology (OT) activities within the Romano di Lombardia site and the other 4 production sites in Italia. Therefore, requires the availability to travel to remote locations. /ppThis includes securing OT systems, managing cyber risks, and complying with Mondi's OT Security Policies. The role requires close collaboration with IT, engineering, operations, and external vendors, and requires strong technical and operational skills. /ph3Key Responsibilities /h3ulliProvides front line information about the security anomalies, or suspicious behaviour of OT Systems to OT Coordinator. /liliReports security incidents, significant threats, vulnerabilities and exposures of OT Systems to OT Coordinator. /liliImplement approved Cyber Security Policies, Standards and Guidelines. In case of doubts, consults with the OT Coordinator for support. /liliMonitor users’ adherence to Cyber Security policies, Standards and Guidelines. /liliDevelops, verifies the existence of documentation and maintains it in an up-to-date version. Responsible for documentation in the area of backup, media handling, system recovery, network management, asset inventory, etc. in cooperation with OT vendor. /liliEnforces and follows physical security rules, in terms of removable media. /liliEstablish and review security baseline configuration standards for operating systems, applications and network devices. /liliMonitor third party and vendor's access and activities in the OT environment. /liliEvaluate logs of access and attempts to access. /liliEvaluate possibility of cryptography and encryption usage. Configuring where feasible and required. /liliMaintain an up-to-date list of OT assets. /liliQuarterly verification of OT assets on which antivirus signatures cannot be regularly updated. /liliConduct periodically walkarounds and seek if there are no suspicious devices (Shadow OT devices) like modems etc. Shadow OT devices must be reported to OT Coordinator immediately. /liliAssist in performing risk analysis, security reviews or penetration testing on OT systems. /liliProvide recommendations for the risk mitigation strategy. /li /ulh3Qualifications /h3ulliBachelor's degree in Computer Science, Engineering or related discipline. /liliAt least 3 years of experience in OT/IT security or industrial automation. /liliFamiliarity with cybersecurity standards and frameworks (e.g. IEC 62443, ISO 27001, NIS2). /liliExcellent communication and coordination skills with multidisciplinary teams. /liliGood communication skills in English and Italian. /li /ulh3Benefits /h3ulliCoaching /liliCafeteria /liliEvents for employees /liliLearning Development /liliParking /liliPublic transportation nearby /li /ulh3Equal Opportunity Statement /h3pLa nostra forza risiede nella diversità e, per questa ragione, ci impegnamo a creare un team che rifletta questo valore nel mondo in cui operiamo. Incoraggiamo le candidature di gruppi tradizionalmente sottorappresentati tra cui: donne, minoranze, persone LGBTQI+ e persone con disabilità. Anche se non soddisfi tutti i requisiti richiesti, vogliamo comunque sentirti. Crediamo nel tuo potenziale e ci impegnamo nel sostenerti mentre cresci e impari in Mondi. /ppPer ulteriori informazioni, contatta Barbara Dama via email. /p /p #J-18808-Ljbffr