OT Security & Architecture Manager

The Operational Technology (OT) Security & Architecture Manager is responsible for leading and maturing the organizations OT cybersecurity program across industrial control systems (ICS) operational technology (OT) marine offshore manufacturing robotics and critical infrastructure environments. This role provides strategic leadership and operational oversight for OT cybersecurity governance risk management security architecture vulnerability management monitoring and compliance activities.

• Role provides the opportunity to work in a hybrid environment working both virtually and in the Houston office when required.

ESSENTIAL

• The OT Security Manager partners closely with OT engineering teams site management business units IT cybersecurity compliance and operations leadership to ensure cybersecurity controls are effectively implemented while maintaining operational safety reliability and availability.

• This position is accountable for establishing and maintaining an enterprise-wide OT cybersecurity program aligned with industry standards including NIST Cybersecurity Framework NIST 800-82 Purdue Model Title 33 CFR maritime cybersecurity requirements customer obligations and internal cybersecurity policies. Responsibilities include oversight of OT patching vulnerability management change management architecture reviews policy development firewall governance OT security monitoring and adversary simulation exercises.

OT Cybersecurity Program Leadership

• Lead the enterprise OT Cybersecurity Program across all business units and operational environments.

• Develop and execute OT cybersecurity strategy roadmap standards and maturity improvement initiatives.

• Establish governance processes to ensure consistent implementation of OT cybersecurity controls globally.

• Serve as the primary cybersecurity advisor to OT operations engineering manufacturing and offshore stakeholders.

• Provide executive reporting on OT cyber risks vulnerabilities remediation efforts and security posture.

OT Threat & Vulnerability Management

• Own the OT vulnerability management program including identification prioritization risk assessment remediation planning and reporting.

• Lead enterprise OT patch management activities while balancing operational availability safety and cyber risk.

• Establish risk-based remediation processes focused on exploitability operational impact and criticality.

• Coordinate vulnerability assessments across OT environments including ICS SCADA DCS PLC HMI and IIoT systems.

• Develop and report KPIs related to remediation effectiveness patch compliance and exposure reduction.

OT Security Architecture & Risk Assessments

• Lead OT cybersecurity architecture governance and provide security oversight for operational technology environments.

• Review and approve OT security architecture designs network segmentation strategies remote access solutions and major technology initiatives.

• Oversee cybersecurity risk assessments for new and existing OT systems and infrastructure.

• Ensure security controls are incorporated into all OT projects from design through deployment.

• Partner with the OT Security Architect to maintain secure reference architectures and technology standards.

• Drive IT/OT convergence initiatives while maintaining appropriate security boundaries.

OT Change Management

• Establish cybersecurity governance within OT Management of Change (MoC) processes.

• Ensure cyber risk review and approval requirements are incorporated into OT engineering and operational changes.

• Validate cybersecurity impacts of system modifications upgrades integrations and technology refresh activities.

• Ensure asset inventories baseline configurations and security documentation remain current following approved changes.

OT Monitoring Logging & Incident Readiness

• Lead OT security monitoring strategy including collection analysis and retention of OT security logs.

• Partner with the Security Operations Center to integrate OT asset telemetry and detection capabilities.

• Develop OT-specific use cases detection rules playbooks and incident response procedures.

• Lead tabletop exercises cyber drills and response preparedness activities for OT environments.

• Monitor emerging OT cyber threats and communicate actionable intelligence to stakeholders.

OT Red Teaming & Security Validation

• Establish and manage OT cyber assessment and adversary simulation programs.

• Coordinate OT-focused penetration testing red team activities architecture reviews and control validation exercises.

• Ensure testing activities are safely coordinated and approved to avoid disruption of operational environments.

• Track remediation of findings and drive continuous control improvements.

Firewall & Network Security Governance

• Oversee OT firewall governance and industrial network security architecture.

• Review firewall rulesets network segmentation controls remote access pathways and external connectivity risks.

• Ensure OT networks align with established cybersecurity architecture standards and best practices.

• Validate compliance with approved secure network designs and zone/conduit architectures.

Policy Standards & Compliance

• Develop maintain and govern OT cybersecurity policies standards baselines and procedures.

• Ensure alignment with:

  • NIST Cybersecurity Framework

  • NIST SP 800-82

  • IEC 62443

  • ISA/IEC industrial security practices

  • Title 33 CFR maritime cybersecurity requirements

  • U.S. Coast Guard cybersecurity requirements

  • Customer-specific cybersecurity obligations

• Lead cybersecurity compliance assessments control reviews audits and remediation activities.

• Support regulatory and customer assurance initiatives across global operations.

Leadership & Team Development

• Lead mentor and develop a high-performing OT cybersecurity team.

• Provide strategic directions to the OT Security Architect and OT Security Project Manager.

• Establish operational objectives performance metrics and development plans.

• Foster strong partnerships between cybersecurity engineering OT operations and business leadership.

• Promote a culture of continuous improvement cybersecurity awareness and operational excellence.

• Supervisory Responsibilities - This position has supervisory responsibilities.

Required

• Bachelors degree in Cybersecurity Engineering Computer Science Information Systems or related field.

• Minimum 10 years of cybersecurity experience.

• Minimum 5 years supporting Operational Technology (OT) Industrial Control Systems (ICS) or critical infrastructure environments.

• Minimum 5 years leading cybersecurity programs projects or teams.

• Minimum 5 years experience with:

  • OT patch management

  • Vulnerability management

  • ICS/SCADA environments

  • Industrial networking

  • Firewall technologies

  • Security architecture

  • Risk assessments

  • Incident response

  • Regulatory compliance

• Experience partnering with engineering manufacturing offshore marine robotics or industrial operations teams.

• CISSP or CISM Certification

Desired certifications:

• GICSP

• GRID

• GSTRT

• ISA/IEC 62443 Cybersecurity Expert

• CCSP

• PMP