POSITION NAME

Cyber Security Governance Engineer

MINIMUM EDUCATION, QUALIFICATIONS & SKILLS

Education: Bachelor’s degree in:

Cyber Security,/ Information Technology,/ Computer Engineering,/Electrical / Electronics / Instrumentation Engineering

(OT / Power systems exposure is mandatory)

Certification:

• IEC 62443 Foundation Specialist, Risk Assessment Specialist 
• CompTIA Security+ / CySA+ /CEH
• CISM / CISSP/GICSP (any one is an advantage)
• Vendor-specific OT security certifications (Nozomi / Fortinet / Palo Alto / Cisco / Microsoft AD – advantageous)

Experience:

5–8 years overall experience in OT / Industrial / SCADA cybersecurity

• Minimum 3 years site-based experience in:

• Grid Stations / Substations
• Power utilities / Oil & Gas / Critical Infrastructure

• Hands-on experience with:

• FAT / SAT execution and witnessing
• Vendor coordination and site delivery
• OT security system installation, hardening, testing, and acceptance

Special Skills & Knowledge:

• Strong understanding of:

• OT architectures (SCADA, DCS, Substation Automation, IEC 61850)
• Network segmentation, zones & conduits
• Perimeter security and Electronic Security Perimeter (ESP)

• Practical experience with:

• Firewalls, AD, Endpoint Protection (EPO)
• Vulnerability Assessment (VA) and remediation
• Asset discovery and monitoring tools (e.g., Nozomi)

• Knowledge of:

• IEC 62443, NERC CIP concepts
• Risk assessment and exception handling

• Ability to manage documentation, compliance evidence, and approvals
• Strong coordination, communication, and enforcement skills at site

Site Cybersecurity Oversight

• • Act as the primary cybersecurity authority at site for automation and OT systems.
  • Ensure new grid station cybersecurity requirements are fully implemented.
  • Enforce cybersecurity practices across design, procurement, installation, commissioning, and handover stages.

Vendor & Contractor Management

• Liaise with vendors, system integrators, and subcontractors for:
  • Cybersecurity implementation
  • Compliance alignment
  • Issue resolution and corrective actions
• Ensure vendor deliverables meet company cybersecurity policies, processes, and specifications.

Communication & Approvals

• Ensure timely submissions, clarifications, and approvals with:
  • Company cybersecurity team
  • Project team
  • Vendors
• Maintain proper communication channels and escalation for cybersecurity risks.

Documentation Management (Mandatory Responsibility)

A. After Kick-off

• Personnel details and CVs
• Cybersecurity organization structure (Cyber Lead, Engineer, Design Team)
• Training certificates (mandatory categories)
• Material list and asset inventory (HW/SW, licenses, expiry)
• Cyber risk assessment report
• GA drawings, panel layout, cable layout
• Network architecture
• Functional Design Specification
• Hardware & software specifications / datasheets
• IP schema
• System hardening guidelines
• FAT procedure
• SAT procedure

B. After Design & Procurement

• FAT internal test report
• Hardening implementation report
• Internal vulnerability assessment report
• FAT witness report
• FAT snag closure evidence and report

Site Physical & Logical Compliance

• Ensure:
  • All devices are labeled with durable asset tags
  • All cables are properly labeled and tagged
• Verify conformity with approved drawings and as-built documentation.

ACCOUNTABILITY

• The Cyber Security Site Engineer is accountable for:
  • Cybersecurity compliance at site
  • Documentation accuracy and completeness
  • Training compliance of all personnel
  • FAT/SAT cybersecurity acceptance
  • Final handover readiness from a cybersecurity standpoint