Cybersecurity IT_OT Manager

Job role function (mission)

Develop and implement an enterprise-wide cybersecurity program to protect the organization's data and systems from cyber threats, such as hacking, data breaches, and malware, according to NIS2 Directive and PSA IT&OT Group Standards.
Responsible and accountable for the NIS2 Directive Implementation including Governance & Personal liability
Manage and deploy IT/OT Cybersecurity Master Plan.
Perform risks assessments and risk management processes.
Provide regular feedback reports on IT/OT Infra security to the local board of directors and business stakeholders.
Overall responsibility and accountability for Compliance and Risk IT related domain.

Main Responsibilities

Support PSA Business Owners in the investigation and remediation of incidents/violations.
Communicate security awareness and develop wide understanding of the existing Security Standards and local regulatory requirements.
Perform security and system performance operations/monitoring activities.
Collaborate with IT/OT Security Officer in the definition of technical and non-technical IT security procedures defined in PSA’s policies and Security Standards in place.
Collaborate with IT/OT Security Officer in the revision and monitoring of compliance with the policy statements and contribute to Internal Audit and Risk Management operations.
Liaise with internal Management functions when appropriate (typically Quarterly Local Security Committees).
Coordinate and liaise with the PSA Sines Senior management, Regional, Group and external stakeholder in the event of an incident, disaster, or crisis.
STRATEGIC decision and action on standards, weekly planning, project management requirement:
- Define and maintain standards for quality, safety, and compliance.
- Ensure compliance with relevant regulations and laws.
- Establish best practices and guidelines for all aspects of the organization's operations.
- Develop and implement weekly plans to ensure the successful execution of projects and initiatives.
- Set priorities and allocate resources to achieve strategic goals.
- Monitor progress and adjust plans as needed.
- Plan, execute, and manage projects to achieve business objectives.
- Identify and manage risks and issues.
- Monitor project performance and communicate progress to stakeholders.
- Support in overseeing Security Requirements for new solutions (as cloud service, emerging technology) requirements, part of the Security by Default standards in place.
- Oversee the security and monitoring operations performed by the Local Security Officer and/or local IT security team.
- Act as PMO regarding current multiyear Security Standards programs (IT and OT).
RISK & COMPLIANCE management on Operation, Monitoring, and Investigation as following:
- Ensure compliance with policies, procedures, and regulations.
- Identify and assess operational risks and implement controls to mitigate them.
- Continuously monitor operations to identify and address potential issues.
- Monitor compliance with laws, regulations, and industry standards.
- Identify and analyse risks and trends.
- Report findings to senior management and recommend corrective actions.
- Conduct investigations into potential violations of policies, procedures, or laws.
- Collect and analyse evidence to determine the root cause of the issue.
- Develop and implement corrective actions to prevent future occurrences.
- Drafting and submission of incident reports to CNCS within legal deadlines
- The support for the CNCS platform registration and annual external reporting

Desired Profile

One or more of the following certifications:
- GIAC Security Essentials Certification
- GIAC Security Leadership Certification
- ISACA Certified Information Security Manager
- Microsoft Certified Systems Engineer: Security
- (ISC)2 SCCP
- (ISC)2 CISSP
- (ISC)2 ISSAP
- ISO 27001/27002
- Cisco IOS Network Security
Experience in enterprise security architecture design.
Experience in enterprise security procedure creation.
Design and deliver employee security awareness training.
Develop Business Continuity Plans and Disaster Recovery Plans based on ISO 24762
Experience in administering IT security controls in an organization.
Working technical knowledge of infrastructure, networks, databases, and systems in relation to IT Security and IT Risk.
Familiarity with Investigative and analytical techniques, procedures, and requirements.
Mandatory Proficiency in English for reading, writing, and speaking.
Solid background in Network Administration.
In-depth experience in Cisco network supervision tools and component.
Proven hands-on with F5 load balancer or similar load balancing technology
Knowledge and experience in Routing, Switching, TShot, VPN, FW (Cisco, Check Point, Palo Alto, Fortinet).
Firewall configuration (Cisco, Check Point, Palo Alto, Fortinet)
Knowledge of networks, technologies, and security protocols (Radius, IPv4/IPv6, NAT, DNS, DHCP, Outdoor Wireless, IPS/IDS).
Solid understanding of Switching and Multicast.
Solid knowledge in Virtualization (Hyper-V, VMware)
Knowledge in Dynatrace, monitoring and other troubleshooting scanning tool.
Welcome knowledge in usage of RPA on proactive networking monitoring.

Knowledge in advanced technology solution as Fluidmesh.Good problem-solving, analysis capability and investigation mindset.
Strategic thinking and capability of operationalizing daily basis tasks and hands-on approach.
Teamwork and collaboration skills.
Excellent communication and interpersonal skills.
Responsibility, accountability, Integrity, and Reliability.
Agility and ability on fast response and resolution time.
Customer centricity and service mindset.
Excellent communication and leadership skills.
Organizational and time-management skills.
Decision-making skills.
Problem-solving and learning agility.
High ability on managing leadership and stakeholders in local, regional and global layers.

Experience in team management/leading role.University degree in Computer science and/or several years equivalent work experience.
Project Management skills (preference for proven PMP certification)
Cybersecurity Certifications.

Compliance and Risk Certifications.

What we offer

🚢 Join the PSA Sines Team!

Do you want to work at one of Europe’s most strategic ports? At PSA Sines, we connect Portugal to the world with innovation and sustainability. We are looking for talented people who want to grow with us and contribute to a more efficient and sustainable future.

We offer:

🌍 Global impact in the logistics sector
📚 Continuous training and development
🤝 A dynamic and collaborative team

Apply today and build your future with us!

Job offer communicated in compliance with quota requirements – Recruitment under Law no. 4/2019.

Candidatar-se agora »