Controls IT

**Job Description Summary**: This controls engineering position in the Offshore Wind Controls team is responsible for leadership in fulfilling cybersecurity standards and aligning customer expectations, working across a global technology team focused on controls scope. The Controls IT & Cyber Engineer participates in the different phases of a project, from employer requirements review during ITO phase up to execution phase ensuring the project aligns with customer needs. This role, in addition to closely collaborating with our internal and external customers, is critical in driving a team culture of technical system, leadership, on-time quality execution and strong customer-focused mindset.

**About us**

GE Renewable Energy is one of the world's leading offshore wind energy companies, with a portfolio of offshore wind turbines ranging from 6 MW to 14 MW that offer increased value to customers with proven performance, reliability, efficiency and availability.

We have invested more than $400 million to develop the Haliade-X, an investment that will also drive down offshore wind farms’ levelized cost of energy, helping make offshore wind energy more competitive for our customers. The Haliade-X was the industry’s first 14MW offshore wind turbine to operate, and is the only 12+MW offshore wind turbine platform that has been operating for over two years, specifically at its Rotterdam prototype site.

**Essential Functions**:
The Controls IT & Cyber Engineer is an engineering reference for all cybersecurity topics related to projects, focused on managing and mitigating vulnerabilities, reviewing employer requirements, facing customers to understand their needs, and working closely with product team to develop any customization required and update documentation accordingly.

The following bullets summarize the scope of this role:

- Empowered cybersecurity decision maker for projects
- Employer requirements review, challenging them when deviating from standard (with the support of OFW Product Security Leader)
- Support customer meetings with cybersecurity scope during both biding and execution phases
- Update/customize cybersecurity documentation for projects
- Work closely to product team to customize the design based on projects needs
- Lead and execute various project cyber risk assessments (IRA/HLRA or DtRA) to align with required norms.
- Act as a facilitator doing the follow up & support of the open cyber vulnerabilities
- Help the different team to execute mitigation actions for the reported vulnerabilities
- Support and influence product requirements definition
- Work closely to OFW Product Security Leader to be updated with standard cyber product.
- Drive overall Architecture, top level design, verification, validation and commissioning requirements
- Collaborate with Controls Project Leaders (CPLs) to review risk and opportunity w.r.t cybersecurity
- Drive consistent solutions across all controls (WTC, WFC, SCADA, Networks)
- Demonstrate System Level thinking
- Collaborate with and maintain close, responsive, and productive working relationships with internal GE groups as well as with external customers.
- Provide clear communication to the project team, control team and the business leaders
- Work and Lead in an Agile software methodology

**REQUIRED**:

- Bachelor degree in IT, Comm’s, Electrical or related Engineering
- Minimum 5 years working experience in engineering
- Minimum 2 years working experience in Cybersecurity OT
- IEC 62443 standard knowledge (3-2 and 3-3 parts)
- Demonstrated experience in networking areas (desirable to have it on OT networks/protocols like OPC-UA, DNP3, IEC-104, IEC 61850, MODBUS, etc.)
- Experience dealing with security risk assessments and risk analysis methodologies (specially threat model analysis)
- Demonstrated ability to meet goals and objectives
- Proven strong interpersonal and leadership skills
- Demonstrated professional English level

**DESIRED**:

- Experience or knowledge in OT/IACS technologies and/or projects and its concepts as: SCADA, PLCs, Historian, HMIs, etc.
- Demonstrable experience in cybersecurity areas in networking areas (desirable to have it on OT networks/protocols like Profinet, Profisafe).
- Knowledge/experience on NIST SP 800 series (specially NIST SP800-30)
- Knowledge/experience on ISO/IEC 27001
- Experience in power generation requisition, working with customers, project mgt. or EPCs
- 3+ years of controls experience
- 5+ years of system integration experience
- 3-5 years of leadership experience in a matrix structure organization, working cross-functionally
- Proven oral and written communication and presentation skills to the team and business leaders
- Wind turbine controls, Wind Farm controls or SCADA knowledge / experience
- Demonstrated ability to independently drive projects to completion
- Demonstrated Technical writing expertise
- Demonstrated experience in working successfully in technical leadership of a diverse team