Cyber Security Team Lead - LNG

Job Description: Cyber Security Team Lead – LNG
Location: Houston, TX (onsite)
Duration: 12 Months
Experience: 10+ Years
 
Job Summary
We are seeking an experienced Cyber Security Team Lead to establish, lead, and manage the enterprise cybersecurity program for an LNG export facility transitioning from construction to commercial operations.
 
The ideal candidate will have strong hands-on experience in cybersecurity architecture, IT/OT security, cloud security, identity management, and security operations within the energy, oil & gas, LNG, or critical infrastructure industry.
 
This role will be responsible for developing enterprise security architecture, implementing IT/OT security controls, managing cybersecurity teams and vendors, and ensuring compliance with industry standards such as NIST CSF 2.0 and IEC 62443.
 
The candidate will work closely with the CIO, executive leadership, plant operations, engineering teams, and external partners to build a secure and resilient cybersecurity environment.
 
Key Responsibilities
 
1. Cybersecurity Strategy & Architecture
Define and implement enterprise cybersecurity strategy, architecture, and security roadmaps.
 
Develop target-state security architecture covering IT, cloud, identity, and operational technology (OT).
 
Lead cybersecurity initiatives across Azure, Microsoft 365, SAP S/4HANA, Databricks, and enterprise commercial platforms.
 
Implement Zero Trust security principles across enterprise infrastructure and applications.
 
Evaluate, select, and implement cybersecurity solutions, including SIEM, SOAR, EDR/XDR, IAM, and cloud security platforms.
 
Perform threat modeling and security assessments using frameworks such as STRIDE.
 
Establish security standards, policies, reference architectures, and governance processes.
 
2. OT/ICS Cybersecurity
Lead cybersecurity initiatives for Operational Technology (OT) and Industrial Control Systems (ICS) environments.
 
Secure industrial systems, including DCS, SIS, APC, historians, utilities, and marine systems.
 
Design and implement IT/OT network segmentation using the Purdue Model.
 
Apply IEC 62443 security standards, including zones and conduits.
 
Implement secure remote access solutions for third-party vendors, OEMs, and plant engineering teams.
 
Establish OT asset inventory, vulnerability management, patching, backup, and change management processes.
 
Collaborate with plant operations, engineering, EPC contractors, and OEM vendors to ensure secure construction-to-operations handover.
 
3. Security Operations & Incident Response
Establish and manage Security Operations Center (SOC) capabilities, including MSSP/MDR partnerships.
 
Implement and oversee SIEM, SOAR, EDR/XDR, and threat detection solutions.
 
Develop incident response procedures, escalation processes, and security playbooks.
 
Conduct cybersecurity tabletop exercises, including IT and OT incident scenarios.
 
Lead vulnerability assessments, penetration testing coordination, and remediation activities.
 
Monitor security threats, investigate incidents, and improve organizational security posture.
 
4. Risk Management, Compliance & Governance
Establish cybersecurity governance and risk management frameworks.
 
Align security controls with NIST Cybersecurity Framework (CSF) 2.0 and IEC 62443.
 
Ensure compliance with applicable U.S. maritime, LNG, and critical infrastructure security requirements.
 
Manage third-party, vendor, and supply-chain cybersecurity risk assessments.
 
Prepare the organization for regulatory audits, compliance reviews, and cybersecurity insurance assessments.
 
Maintain security policies, risk registers, audit documentation, and remediation plans.
 
5. Executive Stakeholder Management
Act as a cybersecurity advisor to the CIO, COO, CFO, and plant leadership.
 
Communicate cybersecurity risks, vulnerabilities, and mitigation strategies in business terms.
 
Develop cybersecurity investment plans and present recommendations to senior leadership.
 
Provide regular updates on cybersecurity performance, risk exposure, and program maturity.
 
Influence business and technology decisions to ensure security is integrated into strategic initiatives.
 
6. Team Leadership & Vendor Management
Build, manage, and mentor a team of cybersecurity engineers and security analysts.
 
Lead recruitment, performance management, training, and professional development.
 
Manage external cybersecurity vendors, MSSPs, MDR providers, and consulting partners.
 
Define operational KPIs, SLAs, and service delivery expectations.
 
Promote cybersecurity awareness and integrate security practices into enterprise projects.
 
Required Qualifications
10+ years of overall cybersecurity experience.
 
4+ years of experience in cybersecurity architecture and strategy.
 
2+ years of experience leading cybersecurity teams, projects, or programs.
 
Hands-on experience securing OT/ICS environments in LNG, oil & gas, petrochemical, energy, or critical infrastructure industries.
 
Strong knowledge of IEC 62443, NIST CSF, and the Purdue Enterprise Reference Architecture.
 
Practical experience with IT/OT network segmentation and industrial cybersecurity.
 
Strong experience with Microsoft Azure, Microsoft 365, Entra ID, Microsoft Defender, and Microsoft Sentinel.
 
Experience with SOC operations, SIEM/SOAR, EDR/XDR, incident response, and vulnerability management.
 
Experience developing cybersecurity target architectures, strategies, and multi-year roadmaps.
 
Strong knowledge of identity and access management, Zero Trust, cloud security, and enterprise risk management.
 
Excellent communication, leadership, stakeholder management, and executive presentation skills.
 
Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience.
 
Must be eligible to obtain a TWIC card and pass applicable background checks.
 
Preferred Qualifications
CISSP, CISM, CCSP, GICSP, GRID, or ISA/IEC 62443 certifications.
 
Experience with OT security platforms such as Claroty, Nozomi Networks, and Dragos.
 
Experience securing DCS/SIS industrial control environments.
 
Knowledge of SAP S/4HANA, ETRM, commercial trading platforms, Databricks, and AI/data platforms.
 
Experience with greenfield plant implementation, LNG facility start-up, or construction-to-operations transition.
 
Previous consulting or cybersecurity advisory experience with CIOs, CISOs, and plant leadership.
 
First-Year Success Criteria
Establish and obtain executive approval for a cybersecurity strategy, target architecture, and three-year roadmap.
 
Complete enterprise IT and OT asset inventory and implement IT/OT network segmentation.
 
Establish secure vendor remote access before plant start-up.
 
Implement 24/7 security monitoring and incident response across IT, cloud, and OT environments.
 
Align cybersecurity controls with NIST CSF 2.0 and IEC 62443.
 
Achieve audit readiness with no outstanding high-severity audit findings.
 
Build a capable internal cybersecurity team and establish effective MSSP/MDR partnerships.
 
Key Skills: Cybersecurity Leadership | OT/ICS Security | LNG | Oil & Gas | IEC 62443 | NIST CSF 2.0 | Purdue Model | IT/OT Segmentation | Azure Security | Microsoft 365 | Entra ID | Microsoft Defender | Microsoft Sentinel | SIEM/SOAR | EDR/XDR | SOC/MDR | Zero Trust | Risk Management | Incident Response | CISSP | CIS