About ITnova:  

• ITnova is an IT and engineering consulting company dedicated to supporting government agencies with innovative and flexible IT solutions. With our advanced technology, we are committed to supporting the Federal and State government’s mission and goals while providing seamless customer service.   

• At our company nothing is more important than our people. Supporting and protecting our employees, families, and community has been, and continues to be, our focus.  

Location 

• Hybrid with onsite work at 2 Montgomery Street, Jersey City NJ with possible meetings at other Port Authority Facilities in the NY/NJ area 

Scope of work 

• The ICS shall work with the Cyber Security group of the Port Authority’s Technology Department (TEC), which is responsible for managing the Cyber Security for the agency. These individuals will provide program leadership and work closely with a variety of stakeholders throughout the Port Authority of NY and NJ to reduce the risk profile of the vast Operational Technology, Industrial Control System (ICS) and SCADA resources found throughout the Authority’s operating and information environments. 

MINIMAL EXPERIENCE AND QUALIFICATIONS  

• Minimum of 20 years of hands-on experience as an ICS and SCADA security leader and/or manager across multiple industrial critical infrastructure sectors. 
• Minimum of 5 years’ experience providing same or similar services to the Port Authority of New York and New Jersey. 
• Minimum of 15 years’ experience with security frameworks such as: IEC 62443, NIST SP 800-82, NIST-CSF, NERC-CIP, NEI 08-09, or other industrial control framework(s). 
• Solid understanding of OT/ICS/SCADA infrastructure and industrial network monitoring solutions. 
• Experience creating ICS Functional Design Specifications and Detailed Design Specifications. 
• Demonstrated Claroty expertise with specific focus on advanced tuning techniques, dashboards, and reporting metrics. 
• Technical writing ability to draft security assessment report, concepts of operation, standard operating procedures, standards & guidelines. 

Desirable Qualification 

Verifiable proof of two or more of the following certifications: 

• Certified SCADA Security Architect (CSSA) 
• Certified Information Systems Security Professional (CISSP) 
• SCADAHacker™- Critical Infrastructure Security 
• Certified Information Systems Auditor (CISA) 
• CompTIA Security + CE Certification (SEC+CE) 
• Certified Information Law Specialist (GLEG) 

JOB RESPONSIBILITIES:  

• Evaluate Port Authority OT/ICS/SCADA cyber security policies, processes, and technical controls. Apply leading cyber security frameworks in an asset management system program. 
• Ensure that business line departments can maximize the functionality of OT/ICSSCADA systems and devices in a wide variety of operating technology environments that include operations, health, safety and resiliency. 
• Discover, manage, monitor and remediate asset inventory of Port Authority (PA) ICS the OT/ICS/SCADA systems and devices, categories of criticality, system attributes and crucial information for the purpose of applying risk management controls. 
• Work with business line units, support vendors, Security Operations Center and PANYNJ IT network staff to conduct a thorough and effective assessments and remediation strategies.Assess the robustness of cybersecurity architectures, technologies, and procedures being implemented within organizational facilities, especially oriented toward host-based and network-based environments. 
• Serve as a resident PANYNJ OT/ICS Subject Matter for the implementation and management of standardized cyber security program with focus on operational resilience and consequence handling. 
• Lead and execute security assessments, utilizing network monitoring systems to collect network traffic log data and security analytics methodologies to identify potential cyber threats and system gaps. 
• Develop detailed risk assessment reports, which explain identified gaps in policies, describe potential business risks, and create prioritized recommendations with estimated costs and effort levels for remediation. 
• Develop strategic and tactical objectives to include new ICS product and service offerings, identify additional business line unit needs, and generate program and project management plans. 
• Assist with converting standalone ICS systems to interconnected devices where assessments have determined that functionality and security dictate regular and/or remote access. 
• Assist with disconnecting ICS systems or devices where assessments have determined that functionality and security dictate isolation from external connections. 
• Prepare reports, presentations, and memoranda to Line Departments, management and other stakeholders regarding the ICS program initiatives, technical requirements, progress and updates. 
• Maintain knowledge of current security areas such as Auditing, Policy, Database Security, Firewall Design and Implementation, Threat Assessments, Risk Analysis, Identity Management, Access Management, and data storage Services. 
• Solve complex digital and operational security problems facing Industrial Control Systems (ICS) used throughout the PA business line unit technology environment(s). 
• Design comprehensive technical solutions that meet client requirements and implement the appropriate software to mitigate critical security risks (e.g., system and mobile antivirus software, encryption modules, patch management programs, insider threat protection, incident response plans, forensic capabilities, and regulation compliance). 
• Provide comprehensive, skills-based training to organizational employees regarding protective ICS functionality and security measures and the understanding of proper maintenance of ICS systems and devices. Identify adequate Knowledge, Skills, and Attributes for ICS personnel at each business unit. 
• Securing cross-domain IT/OT communications and pathways by injecting the ICS team in ICS project development processes from planning through engineering, procurement, implementation, operations, and maintenance. 
• As a function of standing up a complete ICS Asset Management Program, the leadership will be required to evangelize the risks and mitigation of the crucial ICS systems with other entities within the PANYNJ. 
• Coordinate strategic, tactical, and cooperative alignment between PA corporate support services and ICS team to optimize functionality of ICS systems.  

JOB REQUIREMENTS: 

• Must currently possess The Secure Worker Access Consortium (SWAC) credential. 
• Must sign PA Non-Disclosure Agreement.