Senior OT & Control Systems Cyber Security Manager

We have an exciting opportunity for someone to join the GSC Engineering OT Security team on a permanent basis.

As part of this central team you will be involved in the development, implementation & support of new technologies or processes that protect the Operational Technology (OT) environments at GSC sites from being impacted by Cyber Security threats - providing the secure connectivity needed for GSC to deliver our digital ambition. The role scope includes defining, developing, assessing, approving and delivering complex and innovative technologies & processes to reduce OT Cyber security related risks across GSC, which may impact safety, quality, supply or reputation of GSC Manufacturing Operations.

This person will act as a Subject Matter Expert for the technology & processes related to OT Cyber Security, will ensure that good security practices are embedded across GSC manufacturing sites, make recommendations for improvement / oversight and set the direction of the OT security strategy.

Depending on the specific role you end up doing in the team there may also be a need to travel globally up to 10% of the time.

This role will provide YOU the opportunity to lead key activities to progress YOUR career, these responsibilities include some of the following:

Strategy & Standards

• Develop in depth knowledge of the GSK technology, systems and processes deployed to protect our manufacturing operations from cyber security threats
• Examine, design and document reference architectures for manufacturing automation systems deployed across GSC, aligned to industry standards and best practices
• Work with key vendors to ensure vulnerabilities & threats are risk assessed and develop appropriate mitigation activities where required

Support

• Educate GSC site automation engineers, technicians and any related technical resources on OT cyber security best practices and standards
• Define standards, review and approve OT firewall rules to ensure both security and functionality to maximize protection of the systems hosted on the OT network infrastructure
• Work with the sites to ensure that any cyber security incidents and alerts are responded to and completed with the appropriate sense of urgency
• Work throughout the GSC network to define logging, alerting, patching processes to identify, reduce and mitigate cyber security risks and vulnerabilities

Delivery

• Work with sites to ensure that OT systems are protected with the appropriate level of cyber security protection and security controls, based on a defense in depth principles
• Work with Business Unit / Global Tech groups to deliver the required secure network infrastructure & segmentation based on recommended reference architectures and industry standards
• Work with sites to ensure alignment with direction of strategic OT security solutions such as secure remote access, network segmentation and OT access management
• Work with sites and Business Unit / Global Tech to ensure that the appropriate cyber security and system discovery & monitoring tools are in place and in use

Subject Matter Expert (SME)

• SME on GSK OT architecture and infrastructure with broad general knowledge on IT applications and infrastructure with specific knowledge on key platforms se
• SME on manufacturing automation systems, devices and applications with specific knowledge on relevant Manufacturing Execution Systems (Data historians, EBR, OEE, SAP), ISA Standards (ISA 99/IEC62443, S95, S88) & Communication networks and protocols (Serial, Profibus, Ethernet)

Basic Qualifications:

We are looking for professionals with these required skills to achieve our goals:

• Bachelor's in engineering, computer or similar
• 5 years' experience in technical roles that have involved exposure to IT infrastructure and OT Cyber Security technologies / processes
• 5 years' experience Manufacturing Automation / OT systems

Preferred Qualifications:

If you have the following characteristics, it would be a plus:

• Effective communication skills with the ability to interface with operational, capital projects and senior management within the organization
• Specialist training in OT Cyber Security (e.g. SANS ICS410)
• Understanding of regulatory requirements impacting our operations (EHS, GxP, Global Engineering Standards)

#LI-GSK

Please visit  GSK US Benefits Summary to learn more about the comprehensive benefits program GSK offers US employees.

Why GSK?

Uniting science, technology and talent to get ahead of disease together.

GSK is a global biopharma company with a special purpose – to unite science, technology and talent to get ahead of disease together – so we can positively impact the health of billions of people and deliver stronger, more sustainable shareholder returns – as an organisation where people can thrive. We prevent and treat disease with vaccines, specialty and general medicines. We focus on the science of the immune system and the use of new platform and data technologies, investing in four core therapeutic areas (infectious diseases, HIV, respiratory/ immunology and oncology).

Our success absolutely depends on our people. While getting ahead of disease together is about our ambition for patients and shareholders, it’s also about making GSK a place where people can thrive. We want GSK to be a place where people feel inspired, encouraged and challenged to be the best they can be. A place where they can be themselves – feeling welcome, valued, and included. Where they can keep growing and look after their wellbeing. So, if you share our ambition, join us at this exciting moment in our journey to get Ahead Together.

If you require an accommodation or other assistance to apply for a job at GSK, please contact the GSK Service Centre at 1-877-694-7547 (US Toll Free) or +1 801 567 5155 (outside US).

GSK is an Equal Opportunity Employer and, in the US, we adhere to Affirmative Action principles. This ensures that all qualified applicants will receive equal consideration for employment without regard to race, color, national origin, religion, sex, pregnancy, marital status, sexual orientation, gender identity/expression, age, disability, genetic information, military service, covered/protected veteran status or any other federal, state or local protected class.

Important notice to Employment businesses/ Agencies

GSK does not accept referrals from employment businesses and/or employment agencies in respect of the vacancies posted on this site. All employment businesses/agencies are required to contact GSK's commercial and general procurement/human resources department to obtain prior written authorization before referring any candidates to GSK. The obtaining of prior written authorization is a condition precedent to any agreement (verbal or written) between the employment business/ agency and GSK. In the absence of such written authorization being obtained any actions undertaken by the employment business/agency shall be deemed to have been performed without the consent or contractual agreement of GSK. GSK shall therefore not be liable for any fees arising from such actions or any fees arising from any referrals by employment businesses/agencies in respect of the vacancies posted on this site.

Please note that if you are a US Licensed Healthcare Professional or Healthcare Professional as defined by the laws of the state issuing your license, GSK may be required to capture and report expenses GSK incurs, on your behalf, in the event you are afforded an interview for employment. This capture of applicable transfers of value is necessary to ensure GSK’s compliance to all federal and state US Transparency requirements. For more information, please visit GSK’s Transparency Reporting For the Record site.