Specialist It/ot Apac

**A. Purpose/Role of the job**: Describe in 1 phrase what contribution the job is expected to make to the organisation’s objectives.
As Specialist IT/OT Security, the main purpose of this role is to keep IT (Information Technology) and OT (Operational Technology) assets safe from internal and external threats by ensuring the confidentiality, integrity, and availability of company information resources. This is established by implementing and maintaining security controls, performing comprehensive security incident response, engaging in proactive threat assessment, mitigation planning, incident trend analysis, and security architecture review.

**B. Environment/Context/Complexity of the job**: Describe the most important internal and external factors influencing the job.
The Specialist IT/OT Security relies on the assistance and support of all employees and contractors working for the company, including the management, the business and the IT department. As a member of the Global IT Operations team, the job holder will work closely together with all IT teams in advising and implementing IT security controls in those areas.

**C. Responsibilities/Accountabilities of the job**: Describe the main results expected from the job.
IT Security Incident Management
- Coordinate and carry out the security incident management lifecycle including preparation, detection and analysis, containment, eradication, and recovery
- Coordinate incident handling and contingency planning activities
- Incorporate lessons learned from ongoing incident handling activities into incident response procedures, training, and testing and implement resulting changes accordingly
- Manage escalations - in or out of normal business hours liaising with global internal and external service providers

Security Operations
- Daily support and security auditing of the global Cisco ASA firewall landscape.
- Support and audit remote access to internal company resources
- Create and implement network hardening guidelines and procedures
- Constructively challenge and improve existing tools, processes, and procedures
- Maintain current awareness of technology trends, and act as a valued Subject Matter Expert in selecting and designing new solutions in both the IT- and OT environment

Other Responsibilities
- Accountable for the maintenance and implementation of Styrolution’s information security standards in IT and OT environment
- Accountable for the execution of Styrolution’s information security program thereby keeping IT (Information Technology) and OT (Operational Technology) assets safe from internal and external threats
- Continually assess and improve established solutions in both the IT- and OT environment
- Deliver project work streams on time as per business requirements
- Accountable for gap analysis and regular audits of OT environments to ensure compliance with company security requirements and industry security standards
- Accountable for complex and speedy troubleshooting to minimize any (network) security threats in both the IT- and OT environment
- Assess security risks of new or proposed hardware and software and make recommendations on solutions to mitigate those risks
- Periodically assist Network team with network support

**D. Dimensions**: Describe the most representative figures of the job (for example: number of staff, budget the job holder is responsible for, number of projects...).

**Facts**: Number or amount in €

**Number of staff**: 0

**Number of projects**: various sizes

**Supervision of staff**: Give the number of people the job holder supervises (“Direct” means that they report directly to the job holder, “Indirect” means they report to someone who reports to job holder).

**Direct**: 0

**Indirect**: 0

**Total**: 0

**E. Required profile**:

- Level of education & Knowledge:

- Bachelor's degree in computer science, information systems, engineering, or relevant work experience in IT and/or OT
- At least 10 years of experience in IT Security, network security, or similar role
- Industry certification in security and/or network security (e.g. CISSP, CISA, CCNP Security, CCNA) - highly desirable

**Experience in general**:

- Solid understanding of IT infrastructure, services, and standards
- Good communication skills in English

**Technical skills**:

- Expert with Cisco ASA firewalls
- Expertise in switching protocols - STP, ARP Inspection, DHCP Snooping
- Experience in Microsoft Windows 10 and later, and Server 2016 and later landscape
- Experience with industry standards incl. ITIL, NIST SP 800-53, ISO 27000
- Experience with managing multiple projects at any one time
- Competencies, Behavioral skills: (acc. to competency profile and required level of descriptions)
- Proactive; has the drive to get the job done
- Ability to drive change in a dynamic, global, and multi-cultural environment
- Analytical and problem solving skills
- Highly adaptable to change
- Sense of ownership and accountability
- Go