Principal, OT Cyber Engineer at AngloGold Ashanti

General Knowledge & Experience

• Strong analytical skills and cross functional knowledge across multiple security platforms and other infrastructure disciplines
• Deep knowledge of Infrastructure security architectures, vulnerabilities and controls including Industrial Control Systems, PLC, SCADA and Segmented/Firewalled Network Implementations
• Deep knowledge of application security vulnerabilities, testing techniques, and the OWASP framework.
• Experience in Active Directory, Cloud IaaS/PaaS, Virtualization will be advantages
• Experience in OT instrumentation & automation systems
• Experience in using security tools across different facets of infrastructure and applications. (SIEM, EDR, Threat Hunting (scripting), Vulnerability Exploitation, IAM, PAM, OT OPSEC etc.)
• Experience in Secure IoT Messaging Components (AMQP, MQTT etc.)
• Experience in OT/IoT Connectivity protocols such as Cellular, Low Power WAN, HaLow, LoRa, Sigfox etc.
• Skilled in OT Monitoring platform such as Nozomi or Claroty
• Skilled Scripting or Query Languages (PowerShell and/or KQL will be advantageous)
• Experience in Security Penetration Testing covering Industrial Control Systems and/or simulating security events for controlled testing and validating of infrastructure and application environments
• Be able to articulate vulnerabilities, defects, technical controls and risks, with the Business in a manner that can be easily understood.
• Experience of Security frameworks like NIST, CIS or IEC 62443
• Strong Investigation and Postmortem analysis skills with the expectation to discuss the root causes of an issue as they come up.
• Exposure To Mining or other manufacturing industries.

Role Accountabilities

General:

• Compliance with all AGA policies.
• Effective management of Tasks.
• Maintain good inter-departmental relationships.
• Effective management of annual Opportunities (or other AGA Internal processes)
• Acts as an expert for the Enterprise Infrastructure service teams in the plan, design, and delivery of enterprise infrastructure solutions.
• Applies corporate, industry and professional standards in daily activities.
• Align with Enterprise Architecture to develop detail technology roadmaps for the relevant areas. 
• Adopt and communicate new infrastructure application concepts, ideas, techniques and best practices.

Projects:

• Compliance with all service management process.
• Ensure compliance to all relevant governance requirements, e.g. SOX, King IV etc.
• Predicting and overseeing infrastructure or software upgrades based on business needs.
• Provide third-level support for incidents and problems in designated areas of expertise.

Operations:

• Provides infrastructure architecture guidance to infrastructure projects and programs to ensure requirements align with business strategies and architecture roadmaps.
• Provides application architecture guidance to application projects and programs to ensure requirements align with business strategies and architecture roadmaps.
• All agreed POC's, Work Package's, Continuous Service Improvements (CSI's), and Project deliverables to be delivered according to agreed scope, acceptable quality, and within budget.
• Ensure effective governance on projects and report on group-wide project performance according to the Technology PMO standards.
• Responsible for impact analysis and design modifications to existing systems to support new solutions.
• Provides technical direction that may be aligned to a 3-5 year roadmap.
• Develops specifications for interfaces from existing to new systems.

People:

• Establish/Maintain an environment where people can: 
• Be open. 
• Is challenged to achieve their best. 
• Act within the assigned boundaries. 
• Make values-based judgments and business decisions. 
• Living the AGA Values. 
• Effective performance management: 
• Performance Agreements aligned with HR due dates on the system. 
• Performance and KPI Reviews are done timeously, and relevant feedback provided. 
• Adherence to all other HR processes. 

Financial Accountabilities:

• Adherence to the company and departmental processes and timelines. 
• Manage Technology Budget to deliver against the plan. 
• Manage departmental and functional demands for financial and roadmap planning.

Safety Accountabilities:

• Identifying, understanding, and addressing safety and environmental hazards, risks, and consequences.
• Demonstrating behaviour that is consistent with the AngloGold Ashanti Safety Vision and Values.
• Collaborating with others in pursuing safety and environmental goals.
• Seeking opportunities for learning to improve safety and environmental performance.
• Establish a safety culture for subordinates and ensure that work processes are free from safety and health hazards and that subordinates are adequately trained to ensure safety.