Senior Control Systems IT Engineer at Shell Petroleum Development Company

The Senior Controls Systems Engineer is an operations technology security role that assures and manages end to end information and cyber security of all Process Control Domain (PCD) systems used in the production operations of Shell Nigeria   Exploration and Production Company Limited (SNEPCo).

This role co-ordinates a team of IT infrastructure engineers and technicians that specializes in end-point security and secure network communications of computers that directly or indirectly support safe and reliable production in Shell Upstream Operated Units in Nigeria. This requires close coordination with Production Operations and Engineering disciplines to sustain & assure Operations Technology (PCD) Security controls effectiveness, aiming to prevent impact to Shell’s Production Systems Integrity.

Key success factor for this role depends on tactical relationship management with stakeholders who are accountable for Operations Technology (PCD)/ IT Security controls, a good understanding of drivers for business risk appetite, and a skilled level understanding of the IT, Operations Technology (OT) and cyber security technologies.

What is the Role?

This Role will work in conjunction with the IDT P&E Capital Projects, IT Operations Manager and other operations technology security stakeholders to provide services as listed below:

• Ensure the Safe, Secure, and Reliable of deployment of Operations Technology systems for SNEPCo Capital projects in Nigeria ensuring sustained Operations Technology (PCD)/IT Controls effectiveness across all phases of project from define to execute.
• Provide input into Pre-Feed and Feed Deliverables for OT Security in Define phase and FEED contract ITT/evaluation.
•  Provide input into PCD Detailed engineering design for Execute phase.
• Co-ordinate Logistics and Scheduling and Maintenance Planning for Control Systems IT Support personnel.
• Participate in projects peer reviews and health assessments and implement all recommendations.
• Carry out deviation management and risk assessment for all facilities at Execute phase.
• Engage with business stakeholders to determine business demand, understanding challenges facing the business as well as business feedback on services.
• Liaising with Technical Authorities towards ensuring compliance of IT Security within the Operations technology (PCD) Security .
• Drive and ensure the implementation of Incident Response and Management strategies for operations technology landscape systems.
• Embed Think Secure practices and raise Operations technology (PCD)  and IT Security awareness of staff working in or interacting with Operations Technology.
• Act as consultant to projects impacting Operations technology (PCD) landscape to ensure the solutions comply with the Operations technology (PCD) Security policies.
• Ensure that maturity and compliance are assessed and transparent prior to handover to asset operations. Job tasks require a broad skill base in Telecoms, IT/Cyber Security and IT systems to effectively manage the variety of technologies and services.
• Ensure the team complies with business controls for managing and applying changes in the Operations technology (PCD) landscape.
• Ensure that Supportability & Transition is effective for IT- or business-led projects that deliver into the Operations technology (PCD) landscape.
• Participate in firewall rule reviews with the team members to ensure it is aligned with business requirements and have been risk-assessed appropriately.

What we need from you?

• With minimum 5-10 years’ experience in IT business analysis, IT security, IT service delivery and IT infrastructure support. The last three years must be managing operations technology security; Experience in an Oil and Gas industry is preferred.
• Minimum Education or Certification: University degree in Electrical, Electronics, Communications Engineering or Applied Sciences (if further degree in Electronics or Communications Engineering).
• Multiple years of experience in support/administration of IT infrastructure services. Completed Training or Certifications in cybersecurity industry certification such as GICSP or ISC2 CISSP is preferred.
• Certifications in networking, Systems administration and IT service Management  such as CCNP (enterprise or security), MCSA, SC100,  ITILV4 are other preferred requirements.
• Relevant exposure to Process Automation and Controls Optimization disciplines.
• Good knowledge of Control Systems, IT networks, and IT security.
• A strong understanding of Shell’s industrial/IT security standards (DEPs, NIST 800-82, OneITCF).
• Significant understanding of the Upstream business and Joint Venture concept.
• Experience with IT and Business Risk Management.
• Effective communication and interpersonal skills, suitable for diverse cultures and levels in Production and IT.
• Ability to manage relations with peers and senior managers effectively in various organizations.