Manager, Information Security - OT Security Lead

Summary

Information Security - OT Security applies the understanding of a broad range of technologies and solutions to support strategic business needs and engages with customers at all levels of the organization to successfully realize the vision. They will help in identifying and leading IT Security initiatives and projects in the OT space. This role will ensure that enterprise operations technology systems are maintained throughout their lifecycle in accordance with the Celestica’s cyber security requirements. 

#LI-MH1

Detailed Description

Performs tasks such as, but not limited to, the following:

• Performs strategic assessment and understanding of current capabilities and future needs of enterprise operations technology systems security, recognize and understand risks and define the appropriate risk mitigating controls/technologies.

• Able to identify new and alternative approaches to implementing and managing operations technology security activities. Provide security consultation and implementation of appropriate controls to minimize the risk of potential loss of revenue, business opportunity or competitive advantage due to malicious attacks, accidental corruption of information, or unauthorized access to sensitive Company or Customer information assets.

• Safeguards all enterprise OT assets by identifying potential and actual security problems, developing and mandating solutions, and tracking the progress of solution implementation efforts.

• Able to use the business requirements and develop a well-formulated model for security controls, practices, or technologies needed to facilitate.

• Maintain relationships with and consult with industry leading Information Security Associations, Companies, and Forums to ensure currency of latest technology and process advances through the above and appropriate education. Manage security trends and how they affect CLS architecture and security protection landscape.

• Liaise with the enterprise architecture, IT Infrastructure and Site IT team to ensure alignment between the security initiatives and projects.

• Collaborate with Global Engineering in the definition, review and adjustment of security strategies, processes and standards related to the OT environment.

Knowledge/Skills/Competencies

• Strong understanding of system architecture and system design. Ability to perform software evaluation and selection. 

• Comprehensive knowledge of systems integration. 

• Knowledge of customer Account Management Strategies and methodologies

• Ability to prepare budgets and ROI. 

• Understanding of business blueprinting capabilities

• Understanding of infrastructure architecture and application architecture standards at the business level. 

• Skills and Experience in Producing Systems Designs

• Experience in risk and compliance management and process development in the areas of information technology and security

• Advanced knowledge of risk mitigation and business controls. Advanced knowledge of data management and analytics

• Excellent communication and business writing skills as well as the ability to develop executive-level presentations/strategies that include process diagrams and designs

• Strong project management skills and strong knowledge of change management processes

• Strong customer management skills; ability to clearly articulate the role that IT can play in enhancing customer’s activities

• Strong understanding of IP, TCP/IP, and other network administration protocols

• Ability to contribute to the decision making process regarding OT information security, anticipating needs and proposing ways of protecting OT premises in line with evolving threat landscape.

• Experience in OT Infrastructure and Network Security

• Experience in OT Security Governance and Management

Physical Demands

• Duties of this position are performed in a normal office environment.
• Duties may require extended periods of sitting and sustained visual concentration on a computer monitor or on numbers and other detailed data. Repetitive manual movements (e.g., data entry, using a computer mouse, using a calculator, etc.) are frequently required.

Typical Experience

5 to 10 years of relevant OT Security experience

Typical Education

• Bachelor's Degree in related fields 
• Security Certifications (CISSP, CISA, CRISC, etc...)

Notes

This job description is not intended to be an exhaustive list of all duties and responsibilities of the position. Employees are held accountable for all duties of the job. Job duties and the % of time identified for any function are subject to change at any time.