OT Security Compliance Officer Reviewer in Petten

Over de functie
In het kort: Je gaat OT-architecturen en -ontwerpen beoordelen op cybersecurity, naleving toetsen aan IEC 62443 en nucleaire richtlijnen, risico's en afwijkingen identificeren en hierover rapporteren en adviseren richting de Design Authority Cyber Security.
Opdrachtomschrijving Role Summary As a Senior OT Security Design Reviewer, you are responsible for the independent review and assessment of OT-related design documentation, technical solutions and cybersecurity measures developed by suppliers, system integrators and project teams within the PALLAS Reactor Project.
The Senior OT Security Design Reviewer assesses compliance with the NRG PALLAS Cyber Security Requirements and relevant cybersecurity standards and guidelines, including IEC 62443 and applicable IAEA nuclear security guidance. The role focuses on identifying deviations, cybersecurity risks and areas for improvement throughout the design, implementation, testing and commissioning phases.
The Senior OT Security Design Reviewer operates at the intersection of OT cybersecurity, systems engineering, compliance and nuclear safety. Based on independent technical assessments, the reviewer provides substantiated findings, review comments and recommendations to the Design Authority Cyber Security of NRG PALLAS, which is responsible for final design decisions and approvals.
Key Responsibilities Reviewing OT architecture, design and implementation documentation from suppliers, system integrators and project teams;
Assessing compliance of OT solutions with the NRG PALLAS Cyber Security Requirements;
Reviewing the implementation of cybersecurity measures within industrial automation and OT environments;
Assessing the application of IEC 62443 and relevant IAEA nuclear cybersecurity guidance;
Reviewing security zones, conduits, network segmentation and industrial network architectures;
Assessing secure remote access solutions, security monitoring, logging and system hardening measures;
Reviewing IT/OT integration with supporting cybersecurity systems and business systems;
Identifying cybersecurity risks, design deviations and non-compliance with established security requirements;
Assessing the suitability and effectiveness of cybersecurity controls in safety-critical and mission-critical environments;
Reviewing FAT, SAT, testing, acceptance and commissioning documentation from a cybersecurity perspective;
Evaluating and challenging cybersecurity design decisions and their technical justification;
Preparing technical review reports, compliance findings and evidence-based recommendations;
Advising the Design Authority Cyber Security on the compliance status and cybersecurity risks of proposed designs;
Supporting audits, assurance activities and cybersecurity compliance assessments
Contributing to the consistent application of cybersecurity requirements throughout the OT lifecycle of the PALLAS Reactor Project.
Kandidaatomschrijving Essential Due to the specific requirements of the nuclear environment, we are looking for an experienced professional who can connect cybersecurity with technical OT systems, architecture, and lifecycle management.
You Have At least 8 years of experience in industrial automation, OT and cybersecurity, including the implementation of cybersecurity measures in critical infrastructure.
Extensive experience applying IEC 62443 in industrial automation and OT environments.
Proven experience in OT security design reviews, compliance assessments and assurance activities, including the review of technical design documentation.
Strong knowledge of industrial networks and control systems, including SCADA, PLC and DCS, as well as network segmentation, security zones and conduits, security monitoring, secure remote access and system hardening.
Experience identifying cybersecurity risks and non-compliances and producing technical assessment reports with evidence-based recommendations.
Experience in the nuclear sector, with knowledge of relevant IAEA Nuclear Security Series publications and nuclear cybersecurity guidance.
Relevant certifications, such as GICSP, CISSP or ISA/IEC 62443 Cybersecurity Expert, or equivalent.
Experience in large-scale engineering, EPC or critical infrastructure projects, including independent verification, design assurance or working with a Design Authority.
Other Requirements The PALLAS reactor is being built in Petten, so travel to Petten will be required. The main office location is also Petten.
VGB-B security screening is required.
Fluency in English (required); Dutch language skills are an advantage.
Work under the final agreement is performed under the supervision of the applicable NRG PALLAS manager. Therefore the ''Modelovereenkomst inlening personeel'' is applicable (see attached).
Eisen Dienstverband: Detachering
Relevant certifications, such as GICSP, CISSP or ISA/IEC 62443 Cybersecurity Expert, or equivalent.
At least 8 years of experience in industrial automation, OT and cybersecurity.
At least 8 years of experience in the implementation of cybersecurity measures in critical infrastructure/highly regulated environment.
Fluent in English
Wensen Minimum 8 years of relevant OT cybersecurity experience.
Proven experience with IEC 62443 and OT security compliance.
Experience in independent OT security design reviews and assurance.
Strong knowledge of SCADA, PLC, DCS and OT security controls.
Experience in cybersecurity risk assessment and technical reporting.
Nuclear industry or safety-critical environment experience,
Experience with Design Authorities and large-scale engineering projects.
Relevant cybersecurity certifications.
Excellent English communication skills.
Availability to work in Petten and valid VGB-B clearance or eligibility to obtain one.
Weging: 15 %
Work experience as a Senior OT Security Design Reviewer
Does the candidate have at least 8 years of experience in industrial automation, OT and cybersecurity, including the implementation of cybersecurity measures in critical infrastructure. Evaluation will be based on the information in the CV.
Weging: 25 %
Experience in highly regulated environment
Does the candidate have at least 8 years of experience in the implementation of cybersecurity measures in critical infrastructure/highly regulated environment. Evaluation will be based on the information in the CV.
Weging: 10 %
Certifications
Does the candidate hold any relevant certifications, such as GICSP, CISSP or ISA/IEC 62443 Cybersecurity Expert, or equivalent. Evaluation will be based on the information in the CV.
Weging: 10 %
Systems
Does the candidate hold strong knowledge of industrial networks and control systems, including SCADA, PLC and DCS, as well as network segmentation, security zones and conduits, security monitoring, secure remote access and system hardening.
Competenties Geen wensen
Overige informatie Optie tot verlenging: Ja, 2 x 12 maanden
Gespreksdatum: Onbekend
Dienstverband: Detachering
Over de opdrachtgever NRG PALLAS is een organisatie die zich richt op de ontwikkeling van de PALLAS-reactor, een innovatief onderzoeks- en medische isotopenproductieproject in Petten. De PALLAS-reactor zal een belangrijke rol spelen in de productie van medische isotopen voor onder andere de behandeling van kanker en andere medische toepassingen. NRG PALLAS streeft ernaar om een bijdrage te leveren aan de gezondheidszorg en wetenschappelijke ontwikkelingen door middel van nucleaire technologieën.
De sluitingsdatum van deze opdracht is de harde deadline van onze opdrachtgever.
Om je krachtig voor te kunnen dragen hebben wij minimaal één werkdag nodig om samen met jou alle bescheiden in orde te maken.
Wanneer je interesse hebt in deze opdracht en overtuigd bent van een sterke match, reageer dan direct!
Naast een actueel en op de opdracht gericht CV zullen wij altijd vragen om een bondige persoonlijke motivatiebrief (inclusief een toelichting per functie-eis en -wens) en een indicatief uurtarief/maandloon.
Op basis van deze informatie kunnen wij voor je aan de slag! We nemen contact met je op om alle verdere details goed door te nemen en duidelijke afspraken met je te maken.