IT/OT Cybersecurity Advisor

What You Can Expect

As the IT/OT Cybersecurity Advisor in Houston, Texas, for ENGIE North America (ENA), you will be responsible for managing third-party risks, overseeing crisis management and IT Disaster Recovery Plan (ITDRP) exercises, and leading overall project management of IT and OT cybersecurity projects. This role requires a strategic thinker with strong technical expertise, knowledge of OT/ICS and industrial environments, and excellent project management skills.

Reporting to the Chief Information Security Officer (CISO) of ENA, your duties will include:

• Assess and manage cybersecurity risks associated with third-party vendors and partners
• Develop and implement risk mitigation strategies
• Collaborate with procurement and legal teams to ensure third-party contracts include appropriate security requirements
• Serve as the primary point of contact during cybersecurity incidents
• Lead the response to cybersecurity incidents and crises
• Develop and maintain incident response plans, coordinate with internal and external stakeholders, conduct post-incident reviews, and implement lessons learned to improve future responses
• Plan, execute, and evaluate IT/OT Disaster Recovery Plan exercises to ensure the organization's preparedness for potential disruptions
• Coordinate with internal business units to ensure alignment and readiness
• Prepare and present reports on IT/OT cybersecurity activities, risks, and incidents to CISO and executive leaders
• Develop metrics and KPIs to measure the effectiveness of cybersecurity initiatives
• Provide recommendations for improving the organization's cybersecurity posture
• Attend conferences to asses new market technologies, regulations, and threat actor capabilities

What You’ll Bring

• Bachelor’s degree in Cybersecurity or a related field; candidates with an Associate degree and eight (8) years of relevant cybersecurity experience, or a minimum High School Diploma / GED equivalent and ten (10) years of relevant cybersecurity experience, will also be considered
• Minimum of seven (7) years of experience in cybersecurity, with a focus on third-party risk management, crisis management, and project management
• Understanding of cybersecurity principles, practices, and technologies, including network security, encryption, and firewalls
• Familiarity with various cybersecurity frameworks and standards, such as NIST, ISO 27001, and CIS Controls
• Ability to manage and secure IT systems, including servers, databases, and cloud environments
• Skills in managing cybersecurity projects and programs, ensuring they are completed on time and within budget
• Proficiency in analyzing data to identify trends, anomalies, and potential security threats
• Capability to model and predict potential threats to the organization
• Skills in conducting scenario analysis to prepare for various types of cyber incidents
• Strong communication skills to effectively convey risk assessments and mitigation strategies to stakeholders
• Experience with cybersecurity tools and technologies