Information Security Specialist

Description

Job Summary: Work on defining, implementing, and maintaining security controls in ICS/OT environments, performing risk assessments and supporting incident investigations. Key Highlights: 1. Experience in mission-critical environments (BMS, DCIM, UPS) 2. Conducting risk analyses and security assessments for industrial systems 3. Serving as a Subject Matter Expert (SME) in security for industrial systems **We Are Hiring! \| It's Your Time to Join Our \#DNAAscenty!** Have you ever imagined being part of a company that values your growth and well-being? Here at Ascenty, we are looking for an **Information Security Specialist** to join our team and make a difference! * **Education:** Completed Bachelor’s degree in Computer Engineering or related fields; * **Course:** Advanced English; * **Working Hours:** Administrative, from 09:00 to 18:00 * **Code: SEG.INF** **Key Responsibilities:** * Define, implement, and maintain security controls in ICS/OT environments aligned with standards such as IEC 62443, NIST 800\-82, and MITRE ATT\&CK for ICS; * Perform risk assessments, vulnerability mapping, and impact analyses for industrial systems and critical infrastructure. Lead OT network segmentation projects, device hardening, access management, and ICS-specific security policies; * Implement and operate threat monitoring and detection tools in industrial environments (OT IDS/IPS, anomaly detection, network monitoring); * Support engineering, operations, and infrastructure teams in designing secure architectures for new systems and expansions; * Support investigations and responses to security incidents involving industrial environments, sensors, PLCs, RTUs, HMIs, historians, and industrial networks; * Develop technical documentation, standards, procedures, and best-practice guides for integrators, vendors, and internal teams; * Serve as a Subject Matter Expert (SME) in security for industrial systems, representing the area in audits, committees, and technical meetings; * Evaluate vendors, technological solutions, and OT architectures from a security perspective. **Previous Experience:** * Experience in mission-critical environments with expertise in BMS, DCIM, UPS, intelligent PDUs, generators, ATS/STS, HVAC systems, chillers, and physical security (integrated access control and CCTV); * Hands-on experience in projects ensuring security, availability, and compliance, including OT network segmentation and application of the Purdue model adapted for data centers; * Conducting risk analyses, security assessments for industrial systems, and participation in audits and certifications such as ISO 27001, ISO 27701, ISO 22301, SOC 2, and PCI\-DSS; * Managing BMS/DCIM integrators and manufacturers (hardening, firmware, security requirements), handling OT incidents, and experience with OT security solutions such as Nozomi, Claroty, and Dragos. Minimum Education: Bachelor’s Degree Languages:* English (Advanced) * Private Pension Plan * Profit Sharing * Dental Care * Medical Care * Meal Voucher * Fuel Allowance * Food Voucher * Transportation Voucher