OT Security Compliance Officer Reviewer in Petten, Noord-Holland | Opdracht

Opdrachtomschrijving

Role Summary As a Senior OT Security Design Reviewer, you are responsible for the independent review and assessment of OT-related design documentation, technical solutions and cybersecurity measures developed by suppliers, system integrators and project teams within the PALLAS Reactor Project. The Senior OT Security Design Reviewer assesses compliance with the NRG PALLAS Cyber Security Requirements and relevant cybersecurity standards and guidelines, including IEC 62443 and applicable IAEA nuclear security guidance. The role focuses on identifying deviations, cybersecurity risks and areas for improvement throughout the design, implementation, testing and commissioning phases. The Senior OT Security Design Reviewer operates at the intersection of OT cybersecurity, systems engineering, compliance and nuclear safety. Based on independent technical assessments, the reviewer provides substantiated findings, review comments and recommendations to the Design Authority Cyber Security of NRG PALLAS, which is responsible for final design decisions and approvals. Key Responsibilities The Senior OT Security Design Reviewer is responsible for: • Reviewing OT architecture, design and implementation documentation from suppliers, system integrators and project teams; • Assessing compliance of OT solutions with the NRG PALLAS Cyber Security Requirements; • Reviewing the implementation of cybersecurity measures within industrial automation and OT environments; • Assessing the application of IEC 62443 and relevant IAEA nuclear cybersecurity guidance; • Reviewing security zones, conduits, network segmentation and industrial network architectures; • Assessing secure remote access solutions, security monitoring, logging and system hardening measures; • Reviewing IT/OT integration with supporting cybersecurity systems and business systems; • Identifying cybersecurity risks, design deviations and non-compliance with established security requirements; • Assessing the suitability and effectiveness of cybersecurity controls in safety-critical and mission-critical environments; • Reviewing FAT, SAT, testing, acceptance and commissioning documentation from a cybersecurity perspective; • Evaluating and challenging cybersecurity design decisions and their technical justification; • Preparing technical review reports, compliance findings and evidence-based recommendations; • Advising the Design Authority Cyber Security on the compliance status and cybersecurity risks of proposed designs; • Supporting audits, assurance activities and cybersecurity compliance assessments; • Contributing to the consistent application of cybersecurity requirements throughout the OT lifecycle of the PALLAS Reactor Project. Kandidaatomschrijving Essential Due to the specific requirements of the nuclear environment, we are looking for an experienced professional who can connect cybersecurity with technical OT systems, architecture, and lifecycle management. You have: • At least 8 years of experience in industrial automation, OT and cybersecurity, including the implementation of cybersecurity measures in critical infrastructure. • Extensive experience applying IEC 62443 in industrial automation and OT environments. • Proven experience in OT security design reviews, compliance assessments and assurance activities, including the review of technical design documentation. • Strong knowledge of industrial networks and control systems, including SCADA, PLC and DCS, as well as network segmentation, security zones and conduits, security monitoring, secure remote access and system hardening. • Experience identifying cybersecurity risks and non-compliances and producing technical assessment reports with evidence-based recommendations. • Experience in the nuclear sector, with knowledge of relevant IAEA Nuclear Security Series publications and nuclear cybersecurity guidance. • Relevant certifications, such as GICSP, CISSP or ISA/IEC 62443 Cybersecurity Expert, or equivalent. • Experience in large-scale engineering, EPC or critical infrastructure projects, including independent verification, design assurance or working with a Design Authority. Other Requirements • The PALLAS reactor is being built in Petten, so travel to Petten will be required. The main office location is also Petten. • VGB-B security screening is required. • Fluency in English (required); Dutch language skills are an advantage. • Work under the final agreement is performed under the supervision of the applicable NRG PALLAS manager. Therefore the ''Modelovereenkomst inlening personeel'' is applicable (see attached).