OT Security expert

As part of its new organization and the global challenges facing EQUANS in the field of cybersecurity, the team of EQUANS is looking for :
OT Security expert / OT Product security (H/F)
As the OT Security Expert, you will be tasked with building and providing global support to OT / Business teams responsible by securing the service offerings of their businesses, including digital and OT. For example, to better protect our clients' operations and data, this may involve designing secure architectures for their applications or proposing a sustainable security plan for their projects.
In this context, your main missions and activities will include:

• Responsible for designing secure by design solutions and/or maintaining the designs of standardized security solutions that will be built with SLS CCT (Shared Line of Service Cyber Customer Trust) for CEDE (Central Europe, Data Centers & Energy) Business Entities in scope of Customers programs (i.e., Solar Farms implementations, Data Center etc).
• Lead CEDE Programs teams in implementing cybersecurity best practices across OT environments.
• Support incident response activities related to OT systems within CEDE, in coordination with Central Cybersecurity teams.
• Participate in knowledge transfer and awareness initiatives to upskill CEDE teams on OT cybersecurity topics.
• Act as a subject matter expert during internal or external audits and assessments related to OT cybersecurity within CEDE.
• Assist in promoting cyber within the CEDE business and operations in collaboration with SLS CCT & MCISO CEDE.
• When needed, write cyber offers that will be added to the Core services delivered to our customers. This includes participating in the Bid, Design and Acceptance phases of projects. These activities also demonstrate the added value of cyber activities.
• Participate with SLS CCT in Technology Watch (Veille Technologique) to spot solutions, trends and innovations, that can be used by the EQUANS business to deliver secure solutions to EQUANS customers.
• Participate with SLS CCT in Regulatory Watch to monitor regulations in CEDE countries for any impact on the CCT activities, or impact the EQUANS solutions used for EQUANS customers.
• Participate with SLS CCT in a Vulnerability Disclosure Program for EQUANS developed Products, to improve security and comply with legislation (NIS2, CRA).
• Contribute with SLS CCT in building a CCT Service Center with the help of referenced and screened partners.
• Participate with SLS CCT in developing a catalogue of cyber services that can be integrated into our commercial offers including Digital/OT (consultancy, risk analysis, technical audits, security procedures, etc.).
• Participate with SLS CCT in building cyber guidelines and policies related to service offerings including digital and OT delivered to our clients.

Leadership Skills:

• Change leader: deal with market changes quickly and with agility. To drive key changes pragmatically and simply to deliver added value.
• Operational Excellence: focus on operational excellence and high performance.
• Performance culture: achieve targets, net margin and cash flow without compromising on safety.
• Servant Leadership: To be humble and close to the team, promoting their success and simplifying their work. To create a caring environment that fosters development and commitment.
• Empowerment: To facilitate decisions as close as possible to the field and provide the right level of autonomy respecting the fundamentals of the company.
• Open-mindedness: To be curious, receptive and open to new ideas, be able to innovate and share knowledge.

Your profile:

• You have a higher education degree (an Engineering degree in cybersecurity or a master's degree in computer science and networks) or a proven experience as a OT Security consultant (more than 5 years).
• You are recognized for your expertise in securing systems, with ideally some related certifications (CISSP, CEH, CompTIA Security+ or GSEC) or certifications related to the OT environment.
• You have a good understanding of our clients' business challenges.
• Knowledge of security information frameworks and risk management is useful (IEC 62443, ISO/IEC 27001, 27002 et 27005…).
• You are comfortable working in a decentralized and multicultural organization, with heterogenous maturity levels in terms of cybersecurity and architecture practices.
• You are autonomous, energetic and show initiative.
• You are a good communicator, develop and maintain good relationships.
• You have strong ethics and can exercise discretion.
• You are fluent in English and French.