Specialist - Cybersecurity (OT & Cyber Physical)

Role Overview

Specialist - Cybersecurity (OT & Cyber Physical) at Ejqa. This role focuses on operational technology and cyber-physical systems security within maritime and industrial environments.

Role Purpose

Lead Ejqa's Vessel OT Cybersecurity Program as the primary focus, ensuring alignment with IMO and IACS standards. Establish and maintain OT/ICS security baselines, manage vulnerability and incident response across vessel systems, and embed OT security into operational lifecycles and innovation projects.

Key Responsibilities

OT Security Program

• Lead the Vessel OT Cybersecurity Program (assessment and remediation workstreams) as the primary focus, ensuring alignment with IMO and IACS standards.
• Maintain OT/ICS security baselines, risk register, and remediation roadmap, extending practices to cyber-physical systems in innovation projects.
• Ensure continuous improvement of OT security posture through assessments, gap closure, and stakeholder engagement.

OT Security Operations

• Manage OT security monitoring, vulnerability management, and anomaly detection across vessel systems.
• Coordinate OT incident response activities, develop OT-specific playbooks, and integrate maritime threat intelligence into OT operations and response planning.
• Work with SOC/MSSP partners and fleet operations teams to triage, contain, and recover from OT-related incidents.
• Ensure enterprise-wide visibility and alignment with Ejqa's overall incident management framework.

Compliance & Regulatory Alignment

• Ensure ongoing compliance with IMO 2021 Guidelines, IACS Unified Requirements (E26/E27), and other maritime cybersecurity obligations.
• Support regulatory inspections, classification society reviews, and client cybersecurity audits with OT-specific evidence.
• Monitor evolving OT regulatory and industry standards, embedding them into Ejqa's OT security framework.

Resilience & Continuity

• Integrate vessel OT and other operational systems into Ejqa's Business Continuity and Disaster Recovery Plans (BCP/DRP).
• Conduct OT-focused resilience drills and simulations to validate readiness and recovery capabilities.
• Align OT recovery strategies with enterprise-wide continuity and disaster recovery requirements.

Stakeholder & Vendor Engagement

• Collaborate with Ejqa Ship Management, engineering, and innovation project teams to embed OT security in daily operations and new system lifecycles.
• Provide OT cybersecurity awareness and training to vessel crews and technical staff.
• Act as the security liaison with OT vendors, shipyards, and classification societies to ensure secure integration and lifecycle governance.
• Provide OT cybersecurity assurance and audit support for fleet OT systems, shipboard inspections, and classification reviews.

Internal Communications & Coordination

• Provide updates on OT security program progress, incidents, and compliance status to VP – Cybersecurity, Fleet Operations & Ship Management, Fleet IT Support, Business Units, and SOC Team.
• Coordinate OT assessments, remediation efforts, and incident response activities across internal stakeholders.
• Collaborate on vessel IT/OT system integration, troubleshooting, remediation, and technical support.

General Assignment

• Undertake additional cybersecurity tasks or projects as assigned within the department.
• Support other cybersecurity initiatives or assignments as required, contributing expertise to strengthen Ejqa's overall cybersecurity posture.

Qualifications & Experience

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Electrical/Control Engineering, or related field.
• 6–8 years of experience in cybersecurity, with at least 3–5 years focused on OT/ICS or cyber-physical systems security, including experience with vessel OT systems or shipboard cyber audits.
• Proven experience leading OT security assessments, remediation, and incident response activities.
• Familiarity with maritime or industrial environments (e.g., shipping, logistics, energy) is highly desirable.
• Professional certifications preferred: GICSP, ISA/IEC 62443, CISSP, CISM, or equivalent OT/ICS security credentials.

Skills & Competencies

• Strong knowledge of OT/ICS protocols, architectures, and vulnerabilities.
• Hands-on experience with OT system monitoring, incident response, and threat detection.
• Understanding of international standards and regulations: IMO 2021 Guidelines, IACS E26/E27, NIST CSF, ISA/IEC 62443.
• Knowledge of IT/OT integration, vessel IT systems, and supporting technologies.
• Strong analytical and problem-solving skills, with ability to prioritize remediation activities in complex environments.
• Effective communicator, able to collaborate with fleet operations, IT, vendors, and regulators.
• Ability to train and influence both technical and non-technical stakeholders (e.g., vessel crews, fleet IT support, business unit leaders, operations manager).
• High integrity and resilience under pressure, with a proactive and hands-on approach.

Additional Information

• Accountability: Responsible for own acts and omissions. Must follow agreed safe systems of work, follow training and instructions, and report accidents, incidents, and near misses.
• Authority: Empowered to stop work if deemed unsafe.