Cybersecurity Specialist

ROLE SUMMARY

Provide cybersecurity assurance for IT/OT technology designs and integrations, ensuring alignment with BHP Technology and Cybersecurity standards and supporting architecture governance through approved framework deliverables.

CORE RESPONSIBILITIES

• Review EPCM designs and engineering documents for cybersecurity requirements, non-functional controls, segmentation, secure connectivity, identity and access, logging/monitoring, resilience, backup, recovery, patching, vulnerability, and lifecycle considerations.
• Lead or support AISA, DPIA, and IPDA activities; maintain requirement traceability, risks, assumptions, findings, remediation actions, and evidence required for governance decisions.
• Contribute cybersecurity content to HLD, LLD, NIP, and MOP deliverables in the required revisions, and support TSA, early engagement, architecture-panel presentations, and remediation of panel findings.
• Assess the security implications of DCS, OT networks, DWDM/transmission, hosting, CCTV, access control, wireless, data rooms, electrical rooms, and integration with the existing technology platform.
• Participate in project reviews, risk assessments, change-management activities, RFIs, implementation/commissioning readiness, and TTO/TTOR handover documentation, coordinating with technical specialists and service owners.

REQUIRED KNOWLEDGE & QUALIFICATIONS

• Strong knowledge of IT/OT cybersecurity architecture, industrial control-system security, network segmentation, secure remote access, identity and access management, logging, vulnerability management, incident response, privacy, and data-risk assessment.
• Experience with architecture assurance, risk assessment, security requirements, design review, technical governance, and remediation tracking; relevant Cybersecurity, Information Security, Networks, Automation, or Engineering qualification, with recognized security certification advantageous.
• Spanish proficiency preferred, not mandatory.