IT Specialist, ICS Security - GTP

Purpose/Introduction

Chevron Phillips Chemical (CPChem) is seeking an IT Specialist, ICS Security to join the Information Technology team for the Golden Triangle Polymers (GTP) facility located in Orange, TX. This is an exciting opportunity to utilize your experience and be part of a team contributing to the design, startup, and operation of a new plant from the ground up.

The IT Specialist, Industrial Control System (ICS) Security is a technical role that implements Company security standards, procedures, and tools to ensure the security of our ICS systems. The successful candidate will demonstrate excellent written skills and an understanding of cybersecurity frameworks, industry standards, process control systems, and information technology. The individual must also have a strong history of technical accomplishments and proficiencies in working with networks, firewalls, servers and desktop technologies. This position is part of the Business Transformation, IT Manufacturing organization and will work closely with the other IT groups, Process Automation, Instrumentation, Electrical groups, and Internal Audit within a 24/7 manufacturing facility. This position reports directly to the Plant IT Manager.

This position will be assigned to the project location in Orange, TX and will transition to ongoing operations following commissioning and startup with an expected commitment through stable start-up operations.

Responsibilities

• Maintain comprehensive ICS security plan for the site and prioritize projects.
• Maintain security patches, anti-virus software, and backup systems for ICS.
• Track ICS Security exceptions, audit response plans, and other ICS Security efforts.
• Work closely with Corporate ICS Security group on security issues and system designs to ensure that business needs are balanced against security requirements.
• Lead efforts on technical teams to enhance security of ICS environments.
• Support the MOC (Management of Change) processes. Prepare documentation for the site’s ICS Security systems and complete required documents for making changes to the systems.
• Anticipate security and networking events and implement preventive measures.
• Implement corporate best practices.
• Develop good working relationships with other groups including, Process Automation, Corporate Support Staffs, and Operations.
• Provide documentation and training plans for new and existing toolsets.
• Develop and maintain a lifecycle plan for ICS networks and computer infrastructure.
• Participate in ICS audits and Cyber Security Vulnerability Assessments (CSVA).
• Assist in disaster planning that includes development of written disaster recovery plan and annual testing of backup systems.

Skills / Abilities

• Ability to effectively prioritize and execute multiple projects.
• Ability to produce highly technical documentation as required.
• Must be self-motivated, assertive, energetic, and possess a strong work ethic and be able to work with minimal managerial intervention.
• Ability to work in a team-oriented, collaborative environment.
• Excellent analytical, problem-solving, and testing abilities.
• Strong customer service orientation.
• Strong commitment to safety and IT security

Required Qualifications

• High School diploma or GED
• Minium of 4 years’ experience working in IT or related technical field.
• Knowledge of industry standard security frameworks.  (NIST, ISA, NERC CIP)
• Experience with Operating System installation and configuration for both server and desktops.
• Experience with physical and virtual server environments.
• Experience configuring network switches, firewalls and related network protocols.
• Available for 24/7 callout on critical issues.

Preferred Qualifications

• Experience with Process Control Systems / Industrial Control Systems environments.
• Knowledge of CPChem processes for change management and project management.
• Technical certifications in cyber security, network or server technologies.
• Familiarity with industrial networking protocols such as MODBUS, HART, OPC etc.
• Experience gathering quotes from vendors, developing financial information and project plans.