REPORT TO: Group Security Manager (CISO)
JOB PURPOSE:
The IT/OT & Cloud Security Solutions Architect will play a pivotal role in designing, ensuring implementation, and verifying robust security solutions across our IT, OT, and Cloud environments. Additionally, this role will encompass responsibilities for OT security, ensuring secure integration and segregation between IT systems and OT environments. This position demands a deep understanding of cybersecurity principles, architectural frameworks, and best practices. Furthermore, the role will actively participate in security- related projects as a Subject Matter Expert (SME), providing specialized knowledge and guidance to ensure project success.
ACCOUNTABILITIES:
Define, Enforce, and Verify
Verify the implementation of security measures to ensure compliance with the defined standards and baselines by performing regular security assessments and audits.
Develop and enforce standardized security standards and baselines across IT, OT, and Cloud environments.
Ensure consistency in security practices through comprehensive documentation and adherence to established standards and baselines.
Ensure compliance with industry security standards and regulations.
Standardization
Define security hardening measures for all IT, OT, and Cloud systems to mitigate vulnerabilities and reduce attack surfaces.
Collaborate closely with the Cloud & Infra team, ensuring that security solutions are designed according to the established standards and baselines.
Conduct regular security assessments and audits to ensure compliance with hardening guidelines.
Continuous Monitoring and SOC Integration
Perform firewall rule reviews and other security configurations to support advanced threat detection and mitigation.
Ensure the proper application of SOC use cases to maintain situational awareness and proactive security posture.
Connect required log sources to the SOC for continuous monitoring.
Provide periodic (and eventually realtime) operational outcome- driven security metrics, to be included in our security dashboard.
Segregation between IT & OT
Design and implement network segmentation strategies to securely separate IT and OT environments.
Ensure secure data exchange between IT and OT systems while preventing cyber threats from spreading across environments.
Security Architecture
Stay up- to- date with the latest security systems, standards, authentication protocols, and products.
Lead efforts to standardize security practices across the organization, leveraging the latest technologies and methodologies.
Develop a global security architecture and solutions that include IT, OT, and Cloud systems and solutions while ensuring efficient integration and operations in cooperation with the Cloud & Infra team.
Subject Matter Expert (SME) in Security- Related Projects
Provide expertise in risk assessment, mitigation strategies, and security solutions design.
Ensure that security measures are appropriately integrated into project plans and execution.
Participate in security- related projects as a Subject Matter Expert, providing specialized knowledge and guidance to ensure project success.
Collaborate with cross- functional teams to define project requirements, objectives, and deliverables.
EXPECTED RESULTS:
Standardized and compliant security measures are consistently defined, enforced, and verified across all IT, OT, and Cloud environments
Specialized security knowledge and guidance are provided to ensure successful project outcomes, risk mitigation, and integrated security measures
A global, integrated security architecture for IT, OT, and Cloud systems is developed, leveraging the latest technologies and ensuring efficient operations.
Security solutions are designed according to established standards and baselines, with effective hardening measures implemented across all systems
Secure network segmentation strategies are designed and implemented to prevent cyber threats from spreading between IT and OT environments.
All required log sources are integrated with the SOC, enabling proactive threat detection and the provision of actionable security metrics
