Security Specialist TOS OT

As an OT security subject matter expert, you will be part of the Integrated Security team of the unit Grid Field Operations Netherlands. This team consists of two Information Security Officers, two Subject Matter Experts for the physical security perspective and (including yourself) two Subject Matter Experts for the operational technology (OT) security perspective.

The Grid Field Operations Netherlands unit covers the maintenance of the Dutch onshore high voltage substations, as well as brown field building projects. The main security objective is to assure the continuity of the energy supply.

Doelstelling

Your activities will be:

• Taking inventory of the current Telecom central resources
• Setting up a yard-stick based on IEC 62443 for the components in the current OT Wide Area Network and digital substations, to be used in running and future OT security assessments
• Assessing the current OT Wide Area Network and digital substations against this yard-stick
• Define vulnerability and penetration tests to be executed by external parties
• Periodic analysis of OT security incidents for patterns and other points of interest

As part of the team you will also contribute to:

• Defining and updating security risks within the OT perspective in our risk management tool
• The gap analysis related to new legislation
• Bringing the newly introduced Information Security Management System up to speed
• Awareness initiatives, supporting content from the OT perspective

Achtergrond team

Department is TOS (Telecom, OSS & Security), TenneT is looking for a Security Specialist for the Security team. 5 colleagues are working within the team: 3 internal and 2 external.

The security team will make sure that the GFN complies with security guidelines, documented in ISO 27001. TenneT ambition: to get ISO 27001 certified in 2026. ISO 27001 consits of 93 indicators. The team will monit the status of the indicators and what are the steps to achieve the requested level.

Within ISO 27001 there are several domains with an own specialization: physical security, organizational security, physical security, and IT/OT security. For this requisition TenneT is looking for a candidate with the focus on IT/OT security.

The securty specialist has the focus on OT related checks; must be someone who can perform assessments (e.g., field work, connecting equipment; how easy/difficult is it to log in to the OT equipment and how secure is it). Also think of an inventory of current telecom resources and an inventory in the field: what does TenneT currently have in the field?

TenneT is looking for a candidate with a background in the OT domain, preferable with experience with security controls and assessments in an industrial context.