What are the responsibilities and job description for the OT ICS Cybersecurity Specialist position at Targa Resources?
POSITION SUMMARY:
This position works closely with internal and external stakeholders to help build and maintain an effective security program focused on protecting the confidentiality, integrity, and availability Targa’s cyber assets, and mitigate risk across all ICS environments. This position provides operational support for risk management, regulatory compliance, and policy implementation and mentors staff to develop skillsets around ICS cyber security.
This position also works closely with the other members of the security organization, the business, IT staff, and Operational Technology (OT) staff to develop and manage security for one or more IT and OT functional areas (e.g., data, systems, network, and/or applications).
The right candidate will be able to effectively identify risk, analyze cybersecurity event data, and work to provide effective asset protection, incident detection, and response measures across enterprise and operational systems and applications.
JOB DUTIES AND RESPONSIBILITIES:
Targa Resources provides equal employment opportunities based on merit, experience, and other work-related criteria and without regard to race, color, ethnicity, religion, national origin, sex, age, pregnancy, disability, veteran status, or any other status protected by applicable law. We also strive to provide reasonable accommodation to employees’ beliefs and practices that do not conflict with Targa’s policies and applicable law. We value the unique contributions that every employee brings to their role with Targa.
This position works closely with internal and external stakeholders to help build and maintain an effective security program focused on protecting the confidentiality, integrity, and availability Targa’s cyber assets, and mitigate risk across all ICS environments. This position provides operational support for risk management, regulatory compliance, and policy implementation and mentors staff to develop skillsets around ICS cyber security.
This position also works closely with the other members of the security organization, the business, IT staff, and Operational Technology (OT) staff to develop and manage security for one or more IT and OT functional areas (e.g., data, systems, network, and/or applications).
The right candidate will be able to effectively identify risk, analyze cybersecurity event data, and work to provide effective asset protection, incident detection, and response measures across enterprise and operational systems and applications.
JOB DUTIES AND RESPONSIBILITIES:
- Plan, schedule, and execute Quarterly OT patching activities during approved maintenance windows.
- Work with OEM vendors to validate patches and updates, follow formal change control processes and document actions taken
- Identify and assess security vulnerabilities across OT systems.
- Maintain an accurate inventory of OT assets and associated software/firmware.
- Prioritize and coordinate remediation efforts with operations, engineering, IT, and vendors.
- Track open risks and document exceptions or compensating controls.
- Advanced computing skill sets – proficient with multiple computing operating systems and programming languages
- Travel to the field for support
- Other job duties as assigned
- Bachelor’s Degree in M.I.S., Computer Science, Information Security or related degrees, or related years of experience
- Minimum 5 years of cybersecurity work-related experience
- Direct experience with administration, design, and operation of Industrial Control Systems environments
- Deep knowledge and understanding of data protection strategies, cyber networks and system vulnerabilities.
- In-depth experience with Network Intrusion Detection/Prevention systems, Enterprise Endpoint Protection, Enterprise Authentication Technologies, Security Event Information Management, Vulnerability Assessment, and cybersecurity incident response and forensics
- Experience supporting compliance mandates and frameworks such as ISO, NERC CIP, NIST, DEP, APC (Achilles Practice Certification). Direct experience with NIST standard is strongly desired.
- Regular and reliable attendance
- IT auditing, network and systems engineering experience
- Cybersecurity certifications, such as GIAC, CISSP, OSCP
Targa Resources provides equal employment opportunities based on merit, experience, and other work-related criteria and without regard to race, color, ethnicity, religion, national origin, sex, age, pregnancy, disability, veteran status, or any other status protected by applicable law. We also strive to provide reasonable accommodation to employees’ beliefs and practices that do not conflict with Targa’s policies and applicable law. We value the unique contributions that every employee brings to their role with Targa.