OT Cybersecurity Advisor Movable Civil Engineering Structures

A government organization is looking for an OT cybersecurity advisor for movable civil engineering structures.

• The assignment involves an integral analysis of the consequences of the Cybersecurity Act and the European Machinery Regulation for movable civil engineering structures (32 bridges and 11 locks).
• Additionally, the cybersecurity maturity of traffic control installations (VRI's) and pumping stations will be assessed through a GAP analysis.
• The advisor will analyze the current situation, clarify the impact of legislation, perform GAP analyses (using CSIR), and develop a feasible, risk-driven implementation plan.
• Knowledge transfer to a future permanent employee is an important component.
• The contractor independently determines the approach. The focus is on analysis, advice, prioritization, planning, and knowledge management, not on implementation.

What you will do.

• Analyze the current cybersecurity maturity of movable bridges and locks.
• Assess previously conducted analyses and established resistance levels of existing objects.
• Develop a substantiated classification of resistance levels for other movable civil engineering structures.
• Perform GAP analyses for bridges and locks using the CSIR methodology.
• Determine necessary control measures based on risk.
• Advise on measures resulting from the Cybersecurity Act and Machinery Regulation.
• Develop planning, phasing, and cost estimates for the implementation of improvement measures.
• Provide substantive input for subsequent decision-making and investment proposals.
• Perform a cybersecurity GAP analysis for traffic control installations (VRI's) and pumping stations.
• Advise on the safeguarding of sensitive asset information, including software management, password management, backup facilities, patch management, network, and IP configurations.
• Coordinate with internal specialists in asset management, machine safety, industrial automation, and information security.
• Shape and elaborate the plans resulting from the GAP analysis, including required capacity and expertise.

What they ask

• Completed HBO bachelor's degree (higher professional education) in cybersecurity, industrial automation, technical informatics, or similar.
• Minimum 7 years of demonstrable work experience with OT cybersecurity, cybersecurity within industrial automation.
• Demonstrable work experience with CSIR (risk analyses and GAP analyses in cybersecurity).
• Demonstrable work experience with translating OT cybersecurity analyses into technically feasible measures and independently coordinating with suppliers, integrators, and internal specialists.
• Demonstrable work experience with OT cybersecurity within infrastructural objects, industrial automation, and/or comparable environments.
• Demonstrable work experience with assignments in the public sector.

Wishes.

• At least two comparable assignments where the candidate was responsible for cybersecurity analyses, risk analyses, or improvement programs within OT environments, including which industrial control systems were part of it, collaboration with suppliers, and achieved results.
• At least one assignment where the candidate applied the SCIR/CSIR methodology for vital infrastructure, industrial automation, or technical installations, and translated the outcomes into concrete improvement measures, an implementation program, or an investment proposal.
• At least one assignment where the candidate was responsible for knowledge safeguarding, developing transferable products, guiding employees, or preparing an organization for the implementation phase of a program or project.
• Relevant experience with a province, municipality, water board, Rijkswaterstaat, or comparable organization.