Job Title: Factory Cyber Security Champion

The Factory Security team covers Operational Technology (OT) deployed within factory sites including: automation and control systems, safety systems, engineering IT assets, factory and engineering data networks.

The successful candidate will work on the ongoing Factory Cyber Security Programme to assist in the design, installation, configuration, maintenance and management of the OT security processes, solutions, services and controls throughout the factory site and on a variety of Digital Factory and Industry 4.0 projects encompassing:

• Safety

• Quality

• Cost Savings

• Capacity

• Innovation

• Infrastructure

• Waste

The above would be within A&C primarily for Batch, Continuous Processes and Packaging Systems. As Factory Security Champion, you will provide hands-on, technical, industrial control and OT cyber security duties and provide support and guidance to site-based colleagues and visiting third parties (for example, support engineers).

You will collaborate with the IT, Information Security, Electrical and Mechanical Maintenance, Operations, Safety and Quality Assurance personnel to maintain cyber security controls. This role will ensure that cyber security is implemented in compliance with the Factory Security Standards.

Job Requirements:

To provide hands-on deployment and management of OT security controls including; general IT, software and data networking installation and configuration.

• Ability or capability to produce data network diagrams and documentation.

• Ability to identify what you need to know and a willingness to proactively acquire and learn the necessary knowledge and skills.

• To provide technical support and troubleshooting for factory IT systems, data networks and cyber security solutions.

• To assist with the design of OT security solutions.

• To install, configure and administer factory IT and data products and solutions including; Servers and Clients (Windows, Linux and proprietary), Network routers, switchers, WiFi

• To install, configure and administer factory IT and data security products and solutions including; Anti-Virus/Anti-Malware, Patch Management, Access control (Local and Directory based), Log monitoring.

• Assist with cyber incident response.

• To be aware of the cyber threats and vulnerabilities within cyber security and specifically those within a manufacturing environment.

What would my Key Responsibilities include?

Key responsibilities would be around the installation, configuration, maintenance and support of OT security controls within a factory site.

Responsibilities and activities include:

• Relationship building with multi-discipline site personnel.

• Support the delivery of OT security workstreams and projects to ensure the following are carried out: Security solutions are deployed as per design, Factory Security Standards are complied with, Security improvement plans are implemented, Security reports are delivered on time.

• Identify improvements to security standards.

• Incident response contact and accountable for threat monitoring on site

• Lead formation of Business continuity plan for Cyber

• Ensure all OT assets has documented access control local and 3rd Party

• Key contact for Engineering Capex linked to risk and vulnerability management

• Champion security compliance and good security behaviours within the factory site.

• Monitor and uphold high quality of service.

• Communicates with impact, in a way that is open, honest, consistent and clear.

• Work to deliver an agreed portfolio of OT security projects and improvements under the leadership of the Regional Factory Security Lead.

• Assist with the complex control related cyber troubleshooting.

• Working with multiple stakeholders to improve OT security skill sets within the factory workforce.

• Deploy security solutions and improvements, ensuring Security and Safety Standards are applied.

• Apply and monitor compliance with Factory Security Standards

What Skills and Experience do I need?

General

• Typically requires 3 to 5 years of related A&C experience with hands-on experience or demonstrable capability of IT and data networks.

• Work is generally independent and collaborative in nature.

• You’ll need to have strong IT technical skills to include; data networking, general purpose computing platforms such as Windows/Linux, software installation, configuration of security products such as Anti-Virus/Anti-Malware, Firewalls, Logging and Monitoring etc.

• Proficiency in MS Office – Excel / Power Point and Word required.

• Working knowledge of data networks and end-to-end cyber controls and solutions.

• Role is site bases but may require occasional travel to other local sites.

• Experience in an A&C environment within a global manufacturing organisation.

• Experience or knowledge of cyber security concepts.

• Experience or capability to install, configure, and operate common security controls.

• Proven ability to analyse problems, identify core issues and recommend appropriate solutions.

• A keen interest in cyber security and its application in an industrial environment.

• Willingness to proactively acquire and learn the necessary knowledge and skills.

• Good communication skills (both written and verbal)

• Fluent in spoken and written English and Thai language.

• Based from our Minburi Factory site (Latkrabang I.E.) but may require occasional travel to other local sites.

ICS/OT Technology

A background in industrial control is essential. Supplementary experience or demonstrable capability in hands-on IT and networking and cyber security concepts is desirable.

• Experience of A&C systems or components including; Process control, SCADA, Distributed control, PLCs and RTUs, Industrial data communications (e.g. Profinet, EtherNet/IP, Switches and Routers etc), IoT and Industrial IoT.

• Experience of or demonstrable capability to install, configure and manage security controls (preferably in an industrial environment) including; Firewalls, Anti-Virus / Anti-Malware (AV/AM), IPS/IDS, Logging and Monitoring, Access Control, Asset Management.