Paul Whitlock

About Paul Whitlock

I’m an OT Cybersecurity Engineering Manager with 14+ years of experience securing critical ICS and OT environments across power generation and industrial infrastructure. My work focuses on designing and governing cybersecurity programs that protect real-time control systems without compromising availability, safety, or operational performance.I’ve led enterprise-scale OT network hardening initiatives, implementing zero-trust architectures, segmented network designs, IDS/IPS, and MFA-secured remote access to reduce cyber risk while maintaining uptime across 60+ operational sites. I regularly partner with controls engineering, operations, facilities, and enterprise security teams to integrate cybersecurity solutions into complex OT ecosystems.Beyond technical architecture, I own OT cybersecurity programs end-to-end—policy authoring, vendor oversight, budget and resource planning, Agile execution, compliance readiness, and executive communication. I’m especially effective at translating cybersecurity requirements into practical, operations-friendly solutions in environments where failure is not an option.

Experience

1. Cyber Security and Ot Manager

   Mitsubishi Heavy Industries

   Aug 2021 — Present · Orlando, FL, US

   Established and led the OT Cybersecurity program, authoring security policies and system hardening baselines that improved NERC CIP compliance and strengthened ICS/OT security posture.Designed and implemented zero-trust OT network architectures using segmented networks, Palo Alto NGFWs, IDS/IPS, and MFA-secured remote access via SAML 2.0.Led planning, design, testing, and deployment of OT remote access and data collection platforms for large-scale, safety-critical power projects.Oversaw vendors, system integrators, and internal teams to ensure OT cybersecurity requirements were met across the full system lifecycle.Owned budgets, schedules, and resource planning while communicating OT cybersecurity posture, risk metrics, and roadmap updates to executives and customers.

Education

• Troy University

  Bachelor of Applied Science (B.A.Sc.), Buisness and Technology

  2008 — 2016

• KCTCS

  APT, Engineering

  1993 — 1995

• CCAF/Southern Illinois University

  Associate of Science (A.S.) (incomplete), Electro Mechanical Technology

  1990 — 1993

Skills

• Plc
• Control Systems Design
• Project Management
• Gas Turbines
• Procurement
• Gas
• Generators
• Power Systems
• Energy
• Steam Turbines
• Instrumentation
• Root Cause Analysis
• Pumps
• Outages
• Distributed Control System (Dcs)
• Maintenance & Repair
• Ms Project
• Power Generation
• Turbines
• Maintenance
• Osisoft Pi
• Nerc
• Electric Power
• Combined Cycle
• Maintenance Management
• Boilers
• Project Engineering
• Safety Management Systems
• Outage Management
• Preventive Maintenance
• Power Plants
• Process Control
• Programmable Logic Controller (Plc)
• Inspection
• Troubleshooting
• Dcs
• Performance Management
• Supervisory Skills
• Commissioning
• Steam