PThe Operational Technology (OT) Security Expert identifies legal and customer OT Security requirements and assures the definition and implementation of audit-proof policies, processes and guidelines in the GEA’s production environments (e. g. IIoT – Industrial Internet of Things, ICS – Industrial Control Systems, SCADA). He develops, defines, and improves the security of the Operational Technology. The OT Security Expert is responsible for the security of the production processes, including network security, security of production and automation environments and IIoT systems. /ppbResponsibilities / Tasks /b /pullipSingle point of accountability for all aspects of Operational Technology (Production/Shopfloor) Security (scope, quality, pricing, delivery), in alignment with Chief Information Security Officer (CISO) /p /lilipAccountable for identification of legal and customer OT security requirements and assures the definition and implementation of audit-proof policies, processes and guidelines for GEA’s production environments (e. g. IIoT – Industrial Internet of Things, ICS – Industrial Control Systems, SCADA) /p /lilipResponsible for the implementation of OT Security Strategy in synchronization with information security, production and digitalization strategy in the GEA production sites /p /lilipResponsible for the development and continuous standardization, optimization and automation of OT security framework and architecture, incl: threat modelling, data modelling and segregation and secure cloud integration /p /lilipResponsible for the implementation of OT security requirements and security measures in the production environments /p /lilipResponsible for the further development of GEA’s OT Security standards /p /lilipAdvising the OT, production and automation departments on the identification and mitigation of risks in those environments /p /lilipVery close interaction with various business areas (global and local production, risk management, compliance and data protection, legal, sales, IT Enterprise Security Architecture as well as automation and product development departments) /p /lilipShare business and customer problems with the production teams and work on improvements /p /lilipConsulting in projects and platforms in the field of OT security and in the protection of production and automation technology /p /lilipConsulting regarding the secure creation, commissioning and operation of OT /p /lilipDocumentation, analysis and further development of KPIs for OT Security /p /lilipContact person for the documentation and processing of security incidents in the production environments /p /li /ulpbYour Profile / Qualifications /b /pullipBachelor’s Degree in information technology/ Computer Science / Engineering, Business Administration, or a related technical discipline /p /lilipDeep knowledge in ICS, IIoT, SCADA systems. /p /lilipIT Security Certifications advantageous (e.g., ISA/IEC 62443 Certifications, CISSP: Certified Information Systems Security Professional, ISO 27001 Lead Auditor, CISA: Certified Information Systems Auditor) /p /lilip5+ years of experience related to IT/OT Security in a similar role related to ICS, IIoT, SCADA /p /lilipSeveralyears related work experience in industrial / OT / manufacturing environment or in IT-Service-Delivery / IT-Operations / IT-Architecture /p /lilipSignificant qualities in management and conception as well as operationalization of complex issues in the security environment /p /lilipProofed Experience in industrial security standards like ISO 62443 /p /lilipExperience in automation, Industry 4.0 Operational Technology (OT) and Industrial Control Systems (ICS) (DCS, SCADA, PLC, etc.) /p /lilipExperience in firewall systems and expertise in vulnerability management /p /lilipKnowledge of use and configuration of supplementary IT security architectures (e.g. SIEM, IDS / IPS) and the special requirements of OT systems /p /lilipKnowledge about standard methodologies related to networking and system security (WAN, Routing, Proxy) /p /lilipExperience with network protocols such as TCP, UDP, IPSec, SSL and DNS /p /lilipExperience with patch management for operating systems and applications knowledge about encryption technology /p /lilipStrong interpersonal skills in communication and collaboration /p /lilipStrong communication skills, in English, local language is a plus /p /lilipStructured working methods, analytical thinking /p /lilipStrong analytical ability, business acumen, problem solving skills /p /lilipInitiative, ability to work under pressure in combination with high commitment and organizational talent /p /lilipCapabilities, in financial Budget ownership /p /li /ulpbDid we spark your interest? /bbrThen please click apply above to access our guided application process. /p #J-18808-Ljbffr