The role of the OT Cyber Risk Lead involves the implementation of Diageo's OT cyber security controls and providing support and guidance at the site. This includes working closely with the site OT Lead and facilitating and liaising with Governance, Engineering and Senior Management, the Global OT Cyber team and serving as a point of contact for vendors and 3
rd
parties. The OT Cyber Risk Lead is responsible for offering key inputs to site mitigation plans and providing local guidance on OT Cyber Security training plans and knowledge base. They support the embedding of Policies and Procedures at the site, participate in monitoring, auditing, and reporting to establish baselines, and aid with incident or business continuity management.
Another critical aspect of the role is conducting OT Cyber Security Risk Assessments, assisting in creating prioritised mitigation plans for critical systems, and supporting the delivery of actions and tasks. The OT Cyber Risk Lead is involved in ensuring the physical security access of OT equipment by helping with the delivery of remedial plans and ensuring appropriate controlled locations for OT equipment installation alongside the site OT Lead. They actively support 3rd Party contract management by including OT Cyber Security in contracts, service level agreements, auditing and assessing Third Party Competence and Capability in OT Cyber Security.
In collaboration with the site OT Lead the OT Cyber Risk Lead offers support for Secure Remote Access by reviewing and comparing logs, session recordings, and Management of Change adherence. They assist in moving vendors onto the Secure Remote Access system and ensure local controls are in place for non-SRA access. Furthermore, the OT Cyber Risk Lead is responsible for providing guidance to support teams.
Continuous Threat Detection [CTD] and incident support is another crucial responsibility of the role, which involves leading and maintaining key process confirmation reviews, establishing rules and processes for malware scanning, supporting the CTD team with alert investigations, and assisting in vulnerability, patching, and remediation processes.
Reviewing Disaster Recovery and Business Continuity for Cyber Security is also part of the role, including participating in setting up Disaster Recovery Plans, supporting the testing of Backup and Disaster Recovery Plans with reporting, communicating policy and procedure to the local Engineering OT community and Senior Management, and updating Business Continuity Plans to include OT Cyber Security considerations
Skills
Effective Communicator: Proficient in communicating within a dynamic and fast-paced environment characterised by constant change.
Self-Motivated Team Player: Demonstrates initiative as a self-driven and self-starting professional, while fostering strong collaboration within a team setting.
Ownership of OT Cyber Objectives: Assumes responsibility for overseeing and achieving site OT cyber objectives and maintaining appropriate cyber controls.
FMCG background - preferable
OT environment and awareness
As a temporary contractor, you'll be employed by our Managed Service Provider, Magnit Global, who manage most of our temporary contract hiring, you will not be employed by Diageo.