OT (Operational Technology) Security Resource

Company Description

Aspen TESS is Aspen's technology enabled shared services business, established to be a partner in unlocking business value through digital innovation and process efficiency. Aspen TESS will eliminate repetitive effort and use technology to optimize standardized processes, by delivering cost-effective services and innovative solutions to Aspen business units globally. 

OBJECTIVE

The OT (Operational Technology) Security Resource is responsible for ensuring the security, integrity, and reliability of Aspens operational technology systems. This role involves identifying vulnerabilities, monitoring OT infrastructure, and developing strategies to mitigate risks, all while ensuring compliance with industry standards and best practices in OT cybersecurity. The OT Security Resource plays a critical role in maintaining safety and reliability and supporting overall business operations.

KEY RESPONSIBILITIES

Risk Mitigation & Security Strategy:

• Assist in developing and implementing risk mitigation strategies tailored to OT systems.
• Ensure secure configurations of industrial control systems (ICS).
• Promote security awareness among employees interacting with OT systems.

Collaboration & Architecture Design:

• Collaborate with engineering teams and Cyber Security Architects to design secure OT system architectures, including SCADA, DCS, PLCs, and HMIs.
• Serve as a liaison between IT, OT, and facilities teams to ensure adherence to security best practices.

Incident Response & Security Monitoring:

• Execute OT-specific incident response processes and coordinate efforts during security incidents.
• Investigate and address security breaches in OT systems, collaborating with SOC teams to monitor
• OT networks for anomalies.

System Management & Optimization:

• Manage and maintain IT and OT security tools, ensuring optimal performance and effectiveness.
• Assist in testing, troubleshooting, and optimizing OT systems for peak performance and security.

Asset Management & Access Control:

• Maintain an up-to-date inventory of OT assets and their security classifications.
• Implement and enforce strong identity and access management practices for OT systems.

Vendor Coordination & Updates:

• Coordinate with vendors to ensure timely application of firmware updates and patches while minimizing operational downtime

SKILLS AND COMPETENCIES:

• Deep understanding of Computerized System Validation (CSV) processes and regulatory standards to ensure compliance of IT systems in regulated industries.
•  Expertise in writing validation documentation, risk-based validation, and test execution, along with proficiency in document management and change control processes.
• Strong attention to detail, problem-solving, and communication skills are essential for collaborating across IT, Quality, and business functions, while also leading training efforts and driving process improvements.
• Proficiency in regulatory compliance, audit readiness, and the ability to mentor team members, manage multiple tasks, and adapt to evolving business needs, ensuring systems remain compliant and aligned with global strategies.

  QUALIFICATIONS & EXPERIENCE

  
  
• Bachelor’s degree in computer science, Information Technology, Engineering, Life Sciences, or a related field.
• Relevant certifications in Computer System Validation (CSV), Quality Assurance, or GxP compliance are a plus.
• Minimum of 3–5 years of experience in CSV, IT validation, or related quality assurance roles, preferably in a regulated industry (e.g., pharmaceutical, biotechnology, or medical devices).
• Experience in authoring and reviewing validation documents (e.g., Validation Plans, Test Protocols, etc.).