OT Security Assistant Manager

About the role

We are looking for an OT Security Assistant Manager to join our Operational Excellence team at the head office in Kağıthane, Istanbul. You will lead the OT cyber security program across our powership fleet and power plants, protecting production, safety and availability.

Key responsibilities

• Lead OT cyber security program, ensuring compliance with corporate standards, international standards and local energy regulations.
• Own and maintain OT asset inventory, criticality classification and attack‑surface visibility across all sites.
• Design and implement IT/OT segmentation, IEC 62443 zone & conduit structures, OT‑DMZ and hardening standards.
• Establish controlled access to OT environments through PAM, MFA, role‑based access and governed vendor/OEM remote access.
• Build and operate OT monitoring and detection capability (IDS, SIEM, 24/7 SOC) and manage related service providers.
• Develop, test and improve OT incident response, backup/recovery procedures and RTO/RPO targets.
• Conduct periodic OT risk assessments, gap analyses, security audits and report KPIs to senior management.
• Define OT cyber security requirements for new projects, conversions and OEM contracts and review vendor designs.
• Prepare and maintain OT security policies, standards and procedures, and manage change/configuration control.
• Deliver awareness and competency programs for engineers, operators and vessel crews.

Required profile

• Bachelor's degree in Control, Automation, Electrical or Electronics Engineering.
• Minimum 5 years of experience in industrial automation, control systems or cyber security in power generation, oil & gas or industrial sectors.
• Hands‑on experience with IEC 62443 zone & conduit design, Purdue model, IT/OT segmentation and OT‑DMZ architectures.
• Practical knowledge of NIST CSF 2.0, IEC 62443, NERC CIP and ability to translate them into OT controls.
• Experience with OT asset inventory platforms (e.g., Nozomi, Claroty, Dragos, Tenable OT) and OT IDS/Anomaly detection, SIEM and SOC models.
• Strong understanding of secure remote access, privileged access management, MFA and vendor access governance.
• Proven ability to perform OT risk assessments, gap analyses and define cyber security requirements for projects and contracts.
• Excellent written and spoken English (B2 level or above) and willingness to travel domestically and internationally.

Required skills

• PLC, DCS, SCADA, HMI, turbine and generator control systems.
• IEC 62443, NIST CSF 2.0, NERC CIP.
• Nozomi, Claroty, Dragos, Tenable OT.
• OT IDS, SIEM, SOC operations.
• Secure remote access, PAM, MFA, vendor/OEM access governance.
• Modbus, OPC UA, IEC 61850, PROFINET, EtherNet/IP.
• Firewalls, VLANs, switching and remote connectivity concepts.

What we offer

• Opportunity to work on large‑scale international energy projects.
• Exposure to diverse operational environments across multiple countries.
• Collaboration with industry‑leading experts and mentoring opportunities.
• Dynamic, growth‑oriented environment supporting career advancement.
• Competitive compensation and comprehensive benefits package.
• Hybrid working model and one day off on your birthday.
• Private health insurance, training & development, employee discounts.