We are seeking an experienced Cyber Security Team Lead to establish, lead, and manage the enterprise cybersecurity program for an LNG export facility transitioning from construction to commercial operations.

 

The ideal candidate will have strong hands-on experience in cybersecurity architecture, IT/OT security, cloud security, identity management, and security operations within the energy, oil & gas, LNG, or critical infrastructure industry.

 

This role will be responsible for developing enterprise security architecture, implementing IT/OT security controls, managing cybersecurity teams and vendors, and ensuring compliance with industry standards such as NIST CSF 2.0 and IEC 62443.

 

The candidate will work closely with the CIO, executive leadership, plant operations, engineering teams, and external partners to build a secure and resilient cybersecurity environment.

 

1. Cybersecurity Strategy & Architecture

Define and implement enterprise cybersecurity strategy, architecture, and security roadmaps.

 

Develop target-state security architecture covering IT, cloud, identity, and operational technology (OT).

 

Lead cybersecurity initiatives across Azure, Microsoft 365, SAP S/4HANA, Databricks, and enterprise commercial platforms.

 

Implement Zero Trust security principles across enterprise infrastructure and applications.

 

Evaluate, select, and implement cybersecurity solutions, including SIEM, SOAR, EDR/XDR, IAM, and cloud security platforms.

 

Perform threat modeling and security assessments using frameworks such as STRIDE.

 

Establish security standards, policies, reference architectures, and governance processes.

 

Lead cybersecurity initiatives for Operational Technology (OT) and Industrial Control Systems (ICS) environments.

 

Secure industrial systems, including DCS, SIS, APC, historians, utilities, and marine systems.

 

Design and implement IT/OT network segmentation using the Purdue Model.

 

Apply IEC 62443 security standards, including zones and conduits.

 

Implement secure remote access solutions for third-party vendors, OEMs, and plant engineering teams.

 

Establish OT asset inventory, vulnerability management, patching, backup, and change management processes.

 

Collaborate with plant operations, engineering, EPC contractors, and OEM vendors to ensure secure construction-to-operations handover.

 

Establish and manage Security Operations Center (SOC) capabilities, including MSSP/MDR partnerships.

 

Implement and oversee SIEM, SOAR, EDR/XDR, and threat detection solutions.

 

Develop incident response procedures, escalation processes, and security playbooks.

 

Conduct cybersecurity tabletop exercises, including IT and OT incident scenarios.

 

Lead vulnerability assessments, penetration testing coordination, and remediation activities.

 

Monitor security threats, investigate incidents, and improve organizational security posture.

 

Establish cybersecurity governance and risk management frameworks.

 

Align security controls with NIST Cybersecurity Framework (CSF) 2.0 and IEC 62443.

 

Ensure compliance with applicable U.S. maritime, LNG, and critical infrastructure security requirements.

 

Manage third-party, vendor, and supply-chain cybersecurity risk assessments.

 

Prepare the organization for regulatory audits, compliance reviews, and cybersecurity insurance assessments.

 

Maintain security policies, risk registers, audit documentation, and remediation plans.

 

Act as a cybersecurity advisor to the CIO, COO, CFO, and plant leadership.

 

Communicate cybersecurity risks, vulnerabilities, and mitigation strategies in business terms.

 

Develop cybersecurity investment plans and present recommendations to senior leadership.

 

Provide regular updates on cybersecurity performance, risk exposure, and program maturity.

 

Influence business and technology decisions to ensure security is integrated into strategic initiatives.

 

Build, manage, and mentor a team of cybersecurity engineers and security analysts.

 

Lead recruitment, performance management, training, and professional development.

 

Manage external cybersecurity vendors, MSSPs, MDR providers, and consulting partners.

 

Define operational KPIs, SLAs, and service delivery expectations.

 

Promote cybersecurity awareness and integrate security practices into enterprise projects.

 

10+ years of overall cybersecurity experience.

 

4+ years of experience in cybersecurity architecture and strategy.

 

2+ years of experience leading cybersecurity teams, projects, or programs.

 

Hands-on experience securing OT/ICS environments in LNG, oil & gas, petrochemical, energy, or critical infrastructure industries.

 

Strong knowledge of IEC 62443, NIST CSF, and the Purdue Enterprise Reference Architecture.

 

Practical experience with IT/OT network segmentation and industrial cybersecurity.

 

Strong experience with Microsoft Azure, Microsoft 365, Entra ID, Microsoft Defender, and Microsoft Sentinel.

 

Experience with SOC operations, SIEM/SOAR, EDR/XDR, incident response, and vulnerability management.

 

Experience developing cybersecurity target architectures, strategies, and multi-year roadmaps.

 

Strong knowledge of identity and access management, Zero Trust, cloud security, and enterprise risk management.

 

Excellent communication, leadership, stakeholder management, and executive presentation skills.

 

Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience.

 

Must be eligible to obtain a TWIC card and pass applicable background checks.

 

CISSP, CISM, CCSP, GICSP, GRID, or ISA/IEC 62443 certifications.

 

Experience with OT security platforms such as Claroty, Nozomi Networks, and Dragos.

 

Experience securing DCS/SIS industrial control environments.

 

Knowledge of SAP S/4HANA, ETRM, commercial trading platforms, Databricks, and AI/data platforms.

 

Experience with greenfield plant implementation, LNG facility start-up, or construction-to-operations transition.

 

Previous consulting or cybersecurity advisory experience with CIOs, CISOs, and plant leadership.

 

Establish and obtain executive approval for a cybersecurity strategy, target architecture, and three-year roadmap.

 

Complete enterprise IT and OT asset inventory and implement IT/OT network segmentation.

 

Establish secure vendor remote access before plant start-up.

 

Implement 24/7 security monitoring and incident response across IT, cloud, and OT environments.

 

Align cybersecurity controls with NIST CSF 2.0 and IEC 62443.

 

Achieve audit readiness with no outstanding high-severity audit findings.

 

Build a capable internal cybersecurity team and establish effective MSSP/MDR partnerships.

 

Key Skills: Cybersecurity Leadership | OT/ICS Security | LNG | Oil & Gas | IEC 62443 | NIST CSF 2.0 | Purdue Model | IT/OT Segmentation | Azure Security | Microsoft 365 | Entra ID | Microsoft Defender | Microsoft Sentinel | SIEM/SOAR | EDR/XDR | SOC/MDR | Zero Trust | Risk Management | Incident Response | CISSP | CIS

 

In the perfect storm of technology forces shaping the business world, the question is not whether companies need to adapt to stay competitive but which tech partner to trust for long-term business improvement and transformation needs.

That’s why iShare was founded: to be that credible IT partner that cuts through the buzzword clutter to deliver real value by real people. And that starts with doing the basics right.

Based in New Jersey, iShare is a boutique IT consulting firm with strategic advisory, development, and staffing services designed for specific industry verticals. iShare was founded to fill a real market need – with so much noise about cloud, big data, and information security, companies today are adopting software product after product and losing sight of which they need and why, while what they really need is credible consulting that takes the time to understand their company’s unique scenario and requirement, and then architect a solution accordingly.

Recognizing this gap, senior industry executives put their credibility on the line to form iShare and ensure they create a fulfilling experience with lasting value for all stakeholders – customers, employees and partners. iShare leadership team has 20+ years average IT experience and is well-rounded in technology, operations, account and customer management. Our experience spans C-Suite positions with Fortune 100 firms as well as mid-tier firms. Our background includes stints at multibillion-dollar ITO / BPO firms as well as startups.