Operational Technology Cybersecurity Lead

ABOUT US

BGIS is a leading provider of customized facility management and real estate services. With a combined team of over 10,000 professionals worldwide, we relentlessly focus on enabling innovation through the services we deliver. We actively seek new opportunities that drive innovation for our clients’ businesses. Globally, we manager over 320 million square feet of client portfolios across 30,000+ locations in North America, Europe, Middle East, Australia, and Asia. For further information, visit www.bgis.com.

SUMMARY

BGIS is seeking an Operational Technology (OT) Cybersecurity Lead to champion cybersecurity governance, risk management and operational security for client-facing Smart Building and OT environments.

This is a hands-on technical leadership role that bridges cybersecurity, operational technology and building systems. The successful candidate will serve as the cybersecurity lead for assigned client environments, working across BGIS Information Security, IT, Smart Buildings, building operations, technical teams, client stakeholders and third-party service providers.

The role is responsible for establishing and maintaining a sustainable OT cybersecurity program that standardizes and scales security practices while recognizing the operational realities of building technology, including legacy equipment, availability requirements, lifecycle constraints and financial considerations.

The individual will combine OT cybersecurity expertise, technical proficiency and governance direction. They will be equally comfortable reviewing an OT architecture or investigating a security concern as they are presenting cyber risk and investment recommendations to senior leadership.

KEY DUTIES & RESPONSIBILITIES

People Leadership

Demonstrates strong, competent leadership for team members to guide them in reaching their full potential and meeting their objectives, which supports achievement of our corporate goals. Specifically, these responsibilities include but not limited to:

• Full involvement with recruiting talent.
• Provides mentoring, coaching and guidance to all team members.
• Objectively recommends compensation adjustments.
• Manages all aspects of performance.

Security Operations

• Provide hands-on technical administration and configuration of cybersecurity systems supporting OT and Smart Building environments.
• Administer and periodically review privileged, administrative and operator access to critical OT systems and applications.
• Monitor cybersecurity alerts, logs and security events and coordinate investigation and remediation.
• Lead investigation of cybersecurity incidents affecting Smart Building and OT environments, including root-cause analysis, containment, corrective actions and client reporting.
• Track vulnerabilities, audit findings, security incidents and corrective actions through to closure.
• Oversee SIEM integration, cybersecurity logging, monitoring and alerting for applicable OT systems.
• Maintain cybersecurity asset inventories and deployment records across buildings and client environments.
• Ensure cybersecurity tools, integrations and controls remain operational and appropriately maintained.
• Coordinate cybersecurity activities through applicable IT service management and ticketing processes.
• Support business continuity and cyber incident response planning with building operations and technical teams.
• Provide after-hours support and coordination for priority cybersecurity incidents when required.

OT Architecture & Risk Management

• Review Smart Building, BAS, network, cloud and OT architecture to identify vulnerabilities, control gaps and cybersecurity risks.
• Evaluate new building technologies, devices, applications and vendor solutions prior to implementation.
• Review system integrations and connections between building systems, remote operations platforms, cloud services and third-party environments.
• Develop practical security recommendations that balance cybersecurity requirements with operational availability, legacy technology limitations and financial constraints.
• Maintain an understanding of the cybersecurity tools and controls deployed across the client environment and ensure they remain appropriately configured, supported and maintained.

• Maintain OT asset inventory, system architecture documentation, software lifecycle and technology obsolescence management.

OT Cybersecurity Leadership & Governance

• Implement applicable corporate cybersecurity policies and client information-security requirements across the OT environment.
• Develop and maintain OT-specific standards, procedures, technical requirements and operating practices.
• Establish repeatable cybersecurity governance, assurance, reporting and escalation processes.
• Identify cybersecurity gaps and develop prioritized remediation roadmaps based on risk, operational requirements and available funding.
• Support cybersecurity audits, risk assessments, compliance reviews and remediation activities.

• Provide OT cybersecurity input into business cases, investment planning and technical initiatives.

Client & Stakeholder Leadership

• Serve as a primary OT cybersecurity advisor
• Communicate cybersecurity risks, priorities, incidents and recommendations clearly to audiences
• Work with Smart Building Director to translate complex technical cybersecurity issues into clear business, operational and financial impacts.
• Build alignment among Information Security, IT, Smart Buildings, building operations, client account teams and external service providers.
• Lead recurring client cybersecurity governance and operational review meetings.
• Develop clear recommendations that distinguish mandatory security requirements from risk-based improvements and help clients prioritize investment accordingly.

• Build trusted relationships with client cybersecurity and information-security stakeholders.

Vendors & Third-Party Services

• Develop cybersecurity technical requirements for procurements
• Evaluate cybersecurity capabilities of vendors and proposed technology solutions.
• Engage specialized cybersecurity consultants and service providers when additional expertise or capacity is required.
• Oversee third-party cybersecurity services and ensure contracted activities, deliverables and corrective actions are completed.
• Coordinate with internal technical groups and external partners during security investigations and remediation activities.

KNOWLEDGE & SKILLS

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering or a related discipline, or equivalent combination of education and experience.
• 10+ years of progressive cybersecurity experience, including senior responsibility for complex technology environments.
• Demonstrated cybersecurity experience involving Operational Technology (OT), industrial controls, Building Automation Systems (BAS), Smart Buildings or other cyber-physical systems.
• Strong knowledge of cybersecurity architecture, risk management, identity and privileged-access management, vulnerability management, security monitoring, incident response and network security.
• Experience assessing environments containing legacy or operationally constrained technology where traditional enterprise IT security approaches may not always be practical.
• Hands-on experience administering or overseeing cybersecurity controls, tools and platforms.
• Experience developing cybersecurity standards, procedures, risk assessments and remediation plans.
• Experience supporting cybersecurity audits and regulatory or client compliance requirements.
• Strong client-facing and executive communication skills.
• Ability to translate complex technical issues into clear business recommendations.
• Experience managing vendors, consultants, budgets and cybersecurity initiatives.
• Preferred
• Experience securing building automation, IoT/IIoT, physical security, or other connected building systems.
• Knowledge of leading IT and OT cybersecurity frameworks and standards, including NIST CSF, NIST SP 800-82, ISA/IEC 62443, and SOC 2.
• Experience working in critical infrastructure, public-sector, facilities management or other operationally sensitive environments.

Licenses and/or Professional Accreditation

The following certifications are highly preferred, but not required:

• CISSP, CISM, CRISC, GIAC/GICSP or ISA/IEC 62443-related credentials.

This is a regular, full-time position with a salary range of $96,322 - $120,402 per annum. The starting salary will be based on the successful candidate’s competencies, including but not limited to experience, education and performance related to this role.

#LI-SS1

BGIS is a global leader in integrated facility management services. With a combined team of over 10,000 globally, BGIS relentlessly focuses on delivering innovative service solutions that create value for its clients. Globally, BGIS manages over 50,000 facilities totaling more than 600 million square feet across several markets including government, higher education, utilities, telecommunications, financial services, oil & gas, healthcare and cloud enterprise. In addition to managing a diverse portfolio of corporate offices, retail, colleges, hospitals and industrial assets, BGIS is a world leader in the management of data centers and other critical environments.

At BGIS we believe that diversity and inclusion is a key business driver, such that we never lose sight of its importance as it is woven into the fabric if our organization. We are committed to maintaining a barrier-free recruitment process by providing equal employment opportunities through recruiting and retention of individuals of all backgrounds. We recognize that promoting diversity is an essential component of our continuing pursuit for organizational success!

BGIS is an equal opportunity employer, and we welcome you to apply for a position with us! If you require accommodation during the recruitment process, please contact us at [email protected]. Upon request for accommodation, we will consult with the applicant in question and provide, or arrange for the provision of, a suitable accommodation in a manner that takes into account the applicant's accessibility needs due to disability.

We value transparency in our hiring processes. Please note, artificial intelligence may be used in certain stages to screen, assess, or select applicants, however, a human reviewer makes all final decisions. This posting is for an existing vacancy.