Regional Cybersecurity Lead

General responsibilities:

• Responsible for the execution and control of local Cybersecurity Assessments for predefined set of locations in a dedicated region (EU1, EU2, Americas, or APAC);
• Ensuring a full security management cycle beginning from planning - assessing - result analysis - acting;

Planning

• Develop an assessment cycle for the dedicated/responsible locations;
• Alignment of assessment checklist with Cybersecurity partner departments;
• Enable collaborating with vendors and external service providers requests from local IT/OT to ensure cybersecurity proven solutions;
• Establish and foster a communication channel to all related stakeholders (e.g. Data Protection, Legal Department, physical Security) for efficient alignment and knowledge sharing;

Assessing

• Conduct local Cybersecurity assessment with the local IT/OT teams;
• Support local IT/OT Teams during external Audits (like TISAX);
• Identification of cybersecurity risks and conduction of threat analysis;
• Provides guidance on executing standard Cybersecurity requirements;

Result analysis

• Summarize and analyze audit findings incl. cybersecurity risks - rephrase and communicate to the different target groups;
• Contributes to implement and manage processes and tools for transparency monitoring of cybersecurity management system efficiency on the respective level with the partner Cybersecurity Teams;
• Consult local IT/OT Teams to properly address audit findings;
• Supporting budget plans and forecasts as results of countermeasures to address audit findings in consideration of financial perimeters;
• Align and schedule tasks to address findings with local IT/OT teams and plant management;

Acting

• Tracking process of improvements and provide overall status of all locations;
• Issue instructions within the respective level by having the authorization in agreement with the OESL Cybersecurity Officer;
• Share knowledge and align with partner Cybersecurity departments (e.g. challenges in regards of CS rule controls, patch management in production environments);
• Provide local project support/link to central Cybersecurity departments incl. tracking;
• Contributing to the preparation of the relevant Cybersecurity strategy derived from the overall OESL Business and IT strategy;
• define supplementary rules and regulations on the respective level (aligned/harmonized with Cybersecurity Regional Team members);
• Take decisions for all Cybersecurity matters that have impact limited to the respective level/assigned locations.

The role handles the relationship towards our business customers in our OESL locations as well as to our internal and external suppliers for all Cybersecurity related topics. You will be part of the Regional Cybersecurity Team with about 10 colleagues with the objective to support all OESL locations.

Qualifications:

• Bachelor’s degree in computer science, IT, or related field; Master’s preferred;
• Strong skills in Cybersecurity assessments and frameworks (like ISO2700x);
• Several years of experience in IT infrastructure (client, server, virtualization, storage, backup&recoveryOS, data center and cloud environment), and/or cybersecurity;
• Proven expertise in related work processes (e.g. ITSM);
• Strategic view on working closely together with different type of stakeholders (e.g. external Auditors, Plant Management);
• Strong collaboration skills;
• Excellent problem-solving skills, with a focus on governance aspects.