OT Security Compliance Officer Reviewer

Senior OT Security Design Reviewer

About the role

As a Senior OT Security Design Reviewer, you independently review and assess OT design documentation, technical solutions and cybersecurity measures throughout the design, implementation, testing and commissioning phases of the PALLAS Reactor Project.

You assess compliance with the NRG PALLAS Cyber Security Requirements and relevant standards and guidance, including IEC 62443 and applicable IAEA nuclear security guidance. You identify deviations, cybersecurity risks and opportunities for improvement, and provide substantiated findings and recommendations to the Design Authority Cyber Security. The Design Authority is responsible for final design decisions and approvals.

Key responsibilities

• Review OT architectures, designs, implementation documentation and cybersecurity measures.
• Assess OT solutions against the NRG PALLAS Cyber Security Requirements, IEC 62443 and relevant IAEA guidance.
• Review security zones, conduits, network segmentation and industrial network architectures.
• Assess secure remote access, security monitoring, logging and system hardening measures.
• Review IT/OT integration with cybersecurity and business systems.
• Identify cybersecurity risks, design deviations and non-compliance with security requirements.
• Assess the suitability and effectiveness of cybersecurity controls in safety-critical and mission-critical environments.
• Review FAT, SAT, testing, acceptance and commissioning documentation from a cybersecurity perspective.
• Evaluate and challenge cybersecurity design decisions and their technical justification.
• Prepare technical review reports, compliance findings and evidence-based recommendations.
• Advise the Design Authority Cyber Security on design compliance and cybersecurity risks.
• Support audits, assurance activities and cybersecurity compliance assessments.
• Contribute to consistent application of cybersecurity requirements throughout the OT lifecycle.

What you bring

• At least 8 years of experience in industrial automation, OT and cybersecurity, including implementing cybersecurity measures in critical infrastructure.
• Extensive experience applying IEC 62443 in industrial automation and OT environments.
• Proven experience in OT security design reviews, compliance assessments and assurance activities, including reviewing technical design documentation.
• Strong knowledge of industrial networks and control systems, including SCADA, PLC and DCS, as well as network segmentation, security zones and conduits, security monitoring, secure remote access and system hardening.
• Experience identifying cybersecurity risks and non-compliance and producing technical assessment reports with evidence-based recommendations.
• Experience in the nuclear sector and knowledge of relevant IAEA Nuclear Security Series publications and nuclear cybersecurity guidance.
• Relevant certifications, such as GICSP, CISSP or ISA/IEC 62443 Cybersecurity Expert, or equivalent.
• Experience in large-scale engineering, EPC or critical infrastructure projects, including independent verification, design assurance or working with a Design Authority.

Additional requirements

• Travel to Petten is required; the main office location is also Petten.
• VGB-B security screening is required.
• Fluency in English is required. Dutch language skills are an advantage.