Lead Engineer – OT Cyber Security

Role Overview

Lead Engineer – OT Cyber Security at Wood PLC. The role advises on and designs cyber security solutions for customers, with responsibility for compliance with industry and company standards, risk assessments, design documentation and ongoing services.

Company Overview

Wood is a global organization seeking to build its Digital Integration service portfolio and business volume in the energy and materials industries.

Role Purpose

Provide principal consulting on Industrial Control Systems (ICS) Cybersecurity to customers, project personnel and project teams. Lead the design and implementation of cyber security solutions for industrial control systems, support growth and delivery of Digital Integration services, and represent Wood as a subject matter expert in the professional community.

Key Responsibilities

Consulting & Advisory

• Advise clients on promotion, development and implementation of cyber security solutions for industrial control systems in the energy and materials industries.
• Conduct cybersecurity gap assessments aligned with NIST, ISA 27001 and ISA/IEC-62443 frameworks.
• Consult clients on their OT Cybersecurity Resilience roadmap development and implementation.
• Consult on solutions to strategic, contractual, technical, commercial, operational and personnel-related challenges impacting customer service and performance.
• Maintain awareness of technical practice, standards and threat trends impacting ICS Cybersecurity.

Leadership & Standards

• Provide OT cyber security technical leadership and standards compliance.
• Provide leadership to standardize project execution and workflow across regions.
• Maintain personal competency, expertise and certification in OT Cybersecurity standards, practices and technology.
• Inform the organization and provide training on identified trends.
• Promote ICS Cybersecurity practice and principles within the organization.
• Be a champion and role model for ethical behaviour and compliance with applicable laws and policies.

Business Development & Growth

• Support the growth, development and delivery performance across projects in Industrial Cybersecurity and digital solutions.
• Support development and delivery of business plans in support of Digital Integration business growth, aligned with Wood's strategy.
• Support Business Development with presentations, estimates and proposal responses.
• Provide IT/OT risk support for proposal development and costing activities.
• Support business in achieving growth targets set for the Digital Integration group.
• Maintain and develop relationships with strategic and key clients and execution partners.
• Support development of new relationships aligned with Wood's strategy.

Solution Implementation

• Facilitate client meetings.
• Engage with client stakeholders including Operations and IT.
• Manage technical interfaces with third parties, including control system vendors.
• Conduct cyber security assessments.
• Prepare execution plans including consideration of operational constraints and technical assurance.
• Specify, select, configure and test material and equipment.
• Support project teams in solution delivery.
• Commission equipment at client facilities.
• Manage technical and commercial change.
• Deliver to budget and schedule targets.

Knowledge & Practice Development

• Build practice knowledge base and resources within the organization.
• Support analysis of the competitive landscape to determine strengths and weaknesses of our services and solutions and those of our partners.
• Contribute to the business roadmap.
• Support development and implementation of Cybersecurity strategy and initiatives for the Digital Integration group.
• Align cybersecurity initiatives to the evolving threat landscape.

Professional Representation

• Represent Wood in the professional community by attending industry forums, publishing white papers and participating in professional organization committees.
• Maintain contact with key customers and potential customers as a subject matter expert.
• Provide technical and business representation of relevant solutions in conferences, lead Product webinars, participate in Industry Panels and contribute to whitepapers and publications.

Qualifications & Experience

Essential

• Minimum 10 years' experience in a similar role.
• Multi-sector knowledge and global project experience in relevant areas.
• Demonstrated experience in IT/OT cybersecurity management systems, risk assessments and risk mitigation.
• Application of reference architectures and frameworks in an industrial automation environment.
• Hands-on experience specifying, selecting and implementing industrial firewalls, backup and recovery solutions.
• Hands-on experience deploying security solutions, network capture and analysis, and patch updates.
• Hands-on experience configuring and deploying industry-leading switch, router, firewall and network equipment.
• Exposure to different control system vendors and industrial networking equipment.
• Hands-on experience using cybersecurity tools.
• Minimum degree-level qualification in engineering, science, computer science or mathematics.
• Relevant IEC/ISA, GICSP or similar certification.

Skills & Competencies

• Identifying, defining and solving client problems.
• Excellent verbal and written communication skills.
• Proposal and project costing experience.
• Strong understanding of plant operations and digital twin solution architectures.