-
Assess and Develop OT Security Strategy: Evaluate the current OT security environment, identify key risks, and develop a strategy to align OT security with enterprise IT security standards. Prepare an operational plan/roadmap and deliver on the strategy across the organization.
-
OT Security Program Management: Oversee all aspects of the OT security program, including people, processes, technology, and compliance. Ensure OT systems meet regulatory requirements and facilitate third-party security assessments.
-
Incident Management: Identify, report, and control OT security incidents. Manage incidents centrally to ensure consistent response and resolution. For major incidents, prepare post-incident reports and lessons learned to present to senior management.
-
Training and Awareness: Develop and implement a cybersecurity awareness program for OT systems, including classroom and web-based training for staff, contractors, and third parties. Regularly communicate security trends, data, and initiatives to leadership.
-
Emerging Threats and Vulnerabilities: Monitor internal and external threats to OT systems and continuously test the environment for vulnerabilities. Adapt the OT security strategy to address new and emerging threats.
-
OT Security Compliance and Auditing: Manage the OT security risk register, internal/external audits, and ensure compliance with applicable regulations. Ensure OT systems comply with industry standards such as IEC 62443 and NIST frameworks.
-
Third-Party Vendor Management: Manage relationships with third-party OT security vendors to ensure the overall integrity and security of OT systems.
-
Collaboration and Reporting: Work closely with IT, engineering, and operational teams to ensure seamless integration of OT security with IT security. Provide regular updates to the leadership team and board on OT security performance and improvements.
-
Budget Management: Develop and manage the OT security department’s budget to ensure resources are appropriately allocated to security initiatives.
-
Health and Safety: Ensure that all OT security measures comply with health, safety, and welfare regulations, and collaborate fully with the company’s safety protocols.