Security & Risk Officer - OT Management

Volvo Group Digital & IT  

Volvo Group Digital & IT governs the overall Process and IT efficiency within the Group. The function drives the usage of common processes, common IT systems, and IT infrastructures. 

 Infrastructure & Onsite Services 

Infrastructure & Onsite Services (IOS) is the unit in charge of all Volvo Group Digital & IT infrastructure and onsite services. As most of these services are delivered by a partner, the mission is focus on governing and controlling this partner, also managing the remaining IT infrastructure delivery teams at Volvo. 

Digital Quality & Operations 

Digital Quality & Operations is an essential function that provides every digital delivery team within the Volvo Group with the capacity to efficiently manage their digital quality, security, and processes. Our mission is to functionally drive and steer digital quality and digital security across the entire IT delivery organizations of the Volvo Group, based on four pillars: 

• Lean transformation of IT delivery teams. 

• Process organization with the Service Now tool. 

• Fast and agile request delivery organization. 

• Agile security and vulnerability management. 

Security & Risk Officer- OT Management’s Profile 

We are looking for a skilled and motivated OT Security & Risk Officer to join the IT Vulnerability Management team. In this role, you will support several industrial sites, assist stakeholders in identifying and managing the vulnerabilities on various OT systems, including PLCs, SCADA, and IoT systems. Share and promote best practices, escalate identified risks to Mangament Team and support them in its resolution.  

This position, in a global team performs analytical, technical, and administrative work to support factories, warehouses, and production lines. Additionally, this position utilizes global processes to achieve the results. Having an industrial background is an advantage to understand factory constraints, production needs, and system criticality.   

Key Responsibilities: 

Here's how you could make a significant impact: 

• Help industrial sites to onboard into the Vulnerability Management: Organisation, process, tools (ARMIS, ServiceNow) : Create and implement Cybersecurity IT/OT programs, facilitate their execution, and guide cross-functional collaboration to achieve targeted results. Participate in the design of security processes, procedures, and documentation for both IT and OT 

• Designing the Process: Support in the design of OT-security processes, procedures and documentation. Perform awareness related activities within the OT-security domain. 

• Monitoring & Compliance: Monitor compliance with external and internal OT security requirements. Oversee OT related audits and mitigating activities. 

• Foster a dedicated OT Managers network across Volvo industrial sites and share good practices, promote the OT security and increase awareness: Encourage a strong awareness of cybersecurity practices within the IT/OT teams. Documentation and Knowledge Sharing:  Analyze and document vulnerabilities in knowledge articles to help technicians and service leaders understand what they need to do to achieve vulnerability remediation. 

• Support the OT Managers from Volvo industrial sites Keep abreast of the latest security trends, technologies, threat landscapes, and vulnerabilities by engaging in ongoing research, reviewing security publications, attending conferences, and participating in security communities. 

• Collaborate in supporting generic and technical solutions that could be used for securing OT equipment to protect from Cybersecurity and Vulnerabilities: Collaborating and supporting in solutions to address the specific challenges posed by the industry and its environment  

• Project Participation:  Take the lead as a security representative in projects, facilitating the deployment of cutting-edge solutions, tools, and processes. Champion state-of-the-art cybersecurity practices to keep us ahead of the curve. 

 Required Competencies: 

Here are the skills and competences required for the job: 

• Knowledge of OT equipment: Experienced in working in an industrial IT background or OT environment 

• Communication Skills: Excellent communication skills in English, enabling you to articulate complex concepts effectively.  

• Continuous Improvement Mindset: The candidate should have significant professional experience working within a complex organization, to secure IT or OT equipment  with a mindset to drive news ways of working and improving it. 

• Knowledge of cybersecurity principal applied to IT or OT, relevant certification or degree would be a plus. 

• Project Coordination: Your ability to mobilize, coordinate, and organize stakeholders in taking actions related to vulnerability remediation will be key to the success of your mission. 

• Educational Background: Hold a bachelor or master's degree in IT/OT or a related field.   

• Security Tool Development: Creating or contributing to the development of security tools, scripts, and methodologies to automate security processes, enhance detection capabilities, and streamline vulnerability assessment.

Security & Information Management- Why Us? 

• Innovation at the Forefront: Vulnerability management is a new world to explore, innovate, and improve. There are plenty of opportunities for innovation, and creative minds are welcome to help us progress, leading the way in transforming the digital landscape to create a secure environment. 

• Simplicity, Efficiency, Security: Contribute to making the digital transformation journey simpler, more efficient, and inherently secure.