Hello. Were Haleon. A new world-leading consumer health company. Shaped by all who join us. Together, were improving everyday health for billions of people. By growing and innovating our global portfolio of category-leading brands including Sensodyne, Panadol, Advil, Voltaren, Theraflu, Otrivin, and Centrum through a unique combination of deep human understanding and trusted science. Whats more, were achieving it in a company that were in control of.In an environment that we're co-creating. And a culture that's uniquely ours. Care to join us. It isn't a question. With category leading brands such as Sensodyne, Voltaren and Centrum, built on trusted science and human understanding, and combined with our passion, knowledge and expertise, we're uniquely placed to do this and to grow a strong, successful business. This is anexcitingtime to join us and help shape the future.It's an opportunity to be part of something special. AboutRole:This role will provide technical support to setup and run OT Vulnerability Management Program by implementing, and using Vulnerability Management technologies, tools, and processes. The candidate should be knowledgeable of supporting OT vulnerability lifecycle (from detection to closure), keeping a risk-based approach throughout the lifecycle. The best candidate will have the security-by-design mindset and yet understand the importance ofbuilding relationshipswith the other IT teams to convince them to patch the vulnerabilities for reducing cyber risk to the Company.The chosen candidate will analyze the vulnerabilities identified by the OT VM tool, create customer friendly reports and present them with the OT Business and Technology asset owners and remediators, track remediation progress and publish metrics toleadershipidentifying the risk due to vulnerabilities that are not remediated in timely manager. Key responsibilities Support building OT Vulnerability Management Strategic Roadmap and Plan Execute OT VM Processes Develop OT VM processes, guidelines, standards, and metrics Implement OT vulnerability prioritization frameworks Lead remediation tracking meetings to explain vulnerabilities and possible remediation/mitigation solution.Also motivate remediators to commit a remediation plans at the same time ensure their remediation is not impacting the business negatively. Lead zero-day/emergency-vulnerability evaluation and resolution to ensure if a particular zero-day or emergency vulnerability is impacting Haleon OT devices, is there a remediation or mitigation possible etc. Also support incident response team (as needed). Support OT-VM vendor to provide day-to-day support to the customer, by following defined processes and procedures to detect, triage, prioritize, report the vulnerabilities to the customer and providing accurate remediation/mitigation advice.Minimum Experience : 10 years - 7 years of Information Security plus 3 years of OT experience (including 2 years of OT VM tool like Claroty etc) Strong technical knowledge regarding OT technologies, to evaluate and prioritize security vulnerabilities that can impact the OT technologies and to provide appropriate remediation/mitigation recommendations. Experience in executing OT VM program, processes, procedures, standards, metrics.Great written and verbalcommunication(in English) to engage customer in remediation/mitigation activities.Conflict resolutioncapabilities to finding a middle ground in the case where customer is yet convinced to remediate/mitigate. Analyzing security vulnerabilities and deciding if this impacts Haleon and what should be done to remediate or mitigate it. Convincing customer to remediate/mitigate at the same time making sure it is not impacting the business.Finding a balance between Security and Business objectives, by creating a culture where security is major consideration. Should be capable of raising risk/escalations if a zero-day or critical-vulnerability can have a big impact on the organization but customer can't remediate or mitigate. Attending incident meetings that can happen any hour of the day, if incident response team needs VM team's support This role impacts business by ensuring a particular security vulnerability has an impact on the business, convincing business to remediate/mitigate.The candidate will interact with various levels within Business, IT and Security so should have greatcommunication skills.Conflict resolutionwhen interacting with the customer to motivate them to remediate/mitigate a security vulnerability. Great Written and verbalcommunicationto deliver complex technical message in simple English. Understanding and enjoyingcultural diversityas Haleon is truly a global organization. Open to multi task and think on the feet.Preferred Experience:12 years (8 years of Information Security plus 4 years of OT experience(3 years of OT VM tool like Claroty etc.)MinimumEducation:University degree/Masters or equivalentDiversity, Equity and…
