ICS/OT Technology Consultant

This role is part of the D&T department of HEINEKEN International and is located in Heineken Global Shared Service. D&T is proud to bring cutting-edge innovation, strong technology and advanced analytics to HEINEKEN. With speed and agility, we ensure HEINEKEN has the technological competitive advantages it needs to deliver on its ambition.

The ICS/OT Technology Consultant – Security researcher is part of the PCD product team and is one of the professionals who do the work of delivering a potentially releasable increment of the product at the end of each sprint. Product Teams are structured and empowered by the organization to organize and manage their own work. The resulting synergy optimizes the Product Team’s overall efficiency and effectiveness.

The ICS/OT Technology Consultant – Security researcher provide Security standards and developing technologies for automation and engineering teams in our breweries to ensure that all PCD security measurements are in place and technologies fit for purpose to support the business continuity through secured and automated operations.

In our journey, we aim to build robust foundation of Process Control Domain to support the digital transformation agenda in all of our breweries.

Your daily tasks may include:

• Industrial devices (Process Control Domain) vulnerabilities hunting
• Threat intelligence
• PCD vulnerability Management policies and procedures preparation
• Automation and PCD security tools implementation, development
• Delivering the IT projects together with the team according to projects roadmap plan.
• Creating and Developing infrastructure blueprints for PCD; aligned with the PCD security roadmap.
• Your IT Infrastructure and security knowledge are key to unlock the value of technology for PCD and OT environment, especially in a vulnerability management area.
• Developing fit for purpose technologies to support and facilitate the automation process in the breweries.
• Developing the architecture for the digital initiatives to ensure they are secure by design.
• Technical developments and Operations setup.
• Ability to work with local teams at the breweries to help them in translating and implementing what is centrally developed.
• Ability to develop security guidance and standards for PCD.
• You will work closely with the Technology product teams to leverage the D&T services for PCD.
• You will work closely with the project and engineering teams in the global supply chain to understand the business requirements and translate it to solutions and technologies.
• You need to come up with the different technical security aspects and requirements for PCD and how this can be implemented in the breweries.

You are a good match if you have:

• Minimum 4+ years experience in similar industry as ICS/OT Technology Consultant – Security researcher.
• Achievements in PCD vulnerability management – discovered bugs
• Bachelor degree or equivalent experience.
• Understand the Agile mindset and have basic knowledge on working in a Scrum Team.
• Show end-to-end ownership on work that you do.
• Good knowledge of English, written and verbal. 

Content/Technical experience:

• Strong Knowledge in IT Infrastructure and security architecture.
• Ability to translate IT Infra and security architecture to apply it on the PCD/OT environment.
• Familiar with the Process Control Domain (PCD) and industrial security standards (e.g.:  IEC 62443/ISA 99, NIST SP 800-82, NERC CIP).
• Technical hands-on to support local IT teams to fill in any technical knowledge gaps.
• Possession of Networking certificates (e.g. CCNA, CCNP..etc.)  is a plus.
• Possession of any security certificates (e.g. CSSA, GICSP, CISSP, CISM or SABSA) is a plus.
• Architecture skills to be able to develop the PCD architecture.
• Familiar with the different OT/IT protocols.
• Ability to develop and write the PCD security guidance and standards.
• Knowledge in Microsoft products and Active Directory.
• Knowledge in VMWare environment.
• Well knowledgeable of MS Visio

Soft Skills:

• Be able to give consultancies to local IT teams and breweries on how to apply the PCD Reference Architecture.
• Be able to give consultancies regarding vulnerability management, prioritization, remediation to local OpCo teams.
• Analytical Skills: Conduct performance evaluation to identify technical limitation and improve it. Being able to translate technical language into a story that can be understood by less technical people.
• Storytelling. You have the skills to bring a message about a technical solution is such a way that the audience understands why this solution needs to be implemented. You can ‘sell’ the idea.
• You are able to create visually attractive slides that convey a clear message.
• People skills: you can work with people of many different cultures and backgrounds.
• Interested in continuous self-development through training and learning on the job. 
• Open to learn new technologies and ready for a challenges.

We offer: