Role OverviewThe Senior SME, Equivalency is the program's senior technical authority for operational technology and industrial control system cybersecurity in the maritime domain. This position conducts the technical review of all equivalency requests submitted under 33 CFR Part 101 Subpart F and assists with complex waiver requests and cybersecurity plan reviews as assigned. This is a designated Key Personnel position; the Government must acknowledge any replacement in writing.
What You Will Do
Conduct the detailed technical review of all equivalency requests, evaluating whether the request clearly identifies the regulatory requirement at issue, describes the proposed alternative safeguard, and provides sufficient supporting evidence for Government evaluation. Determine whether the proposed alternative provides a level of security that meets or exceeds the effectiveness of the specified regulatory requirement, and document that analysis so it is technically supportable and traceable.
Why It Might Be a Fit
Seven (7) years of hands-on experience focused on OT/ICS cybersecurity. Expert-level knowledge applying cybersecurity frameworks such as NIST CSF and ISA/IEC 62443 specifically to OT/ICS environments. Expert-level understanding of OT network architecture and security controls, with demonstrated capability applying that knowledge to maritime systems such as vessel navigation systems, cargo handling systems, and facility automation.
Requirements
- Seven (7) years of hands-on experience focused on OT/ICS cybersecurity.
- Expert-level knowledge applying cybersecurity frameworks such as NIST CSF and ISA/IEC 62443 specifically to OT/ICS environments.
- Expert-level understanding of OT network architecture and security controls, with demonstrated capability applying that knowledge to maritime systems such as vessel navigation systems, cargo handling systems, and facility automation.
- At least one cybersecurity certification satisfying the certification requirement for the DoD 8140 DCWF work role of Security Control Assessor (for example CISSP, CISA, or CISM)
- At least one advanced OT-focused cybersecurity certification, such as the Global Industrial Cyber Security Professional (GICSP).
- Must disclose, for organizational conflict of interest screening, any current or prior engagement performed for MTSA-regulated vessel, facility, or Outer Continental Shelf facility owners or operators involving cybersecurity plan development, cybersecurity assessment, or related advisory services.
Benefits
- health insurance
- dental insurance
- vision insurance
- life insurance
- 401(k) with company matching
- paid time off and holidays
- employee referral program
- educational assistance
]]>