Cyber - Operational Technology - Senior - Consulting

EY•Hartford, DC

2d•$104,800 - $218,500•Remote

About The Position

Industrial and critical infrastructure organizations are strengthening cybersecurity as Operational Technology environments become more connected and exposed to changing threats. They need professionals who can understand industrial systems, work across engineering and cybersecurity teams, and turn technical analysis into practical improvements. As an OT Cybersecurity Senior or Senior Consultant in Technology Consulting, you will deliver and lead defined workstreams across OT security assessments, architecture, strategy and implementation initiatives. You will work directly with clients, prepare high-quality technical and executive deliverables, and help improve the security and resilience of industrial environments.

Requirements

Strong understanding of OT and ICS cybersecurity principles, industrial control environments and the operational impact of security decisions.
Working knowledge of industrial network architectures, common protocols and controls such as segmentation, firewalls, IDS or IPS, allowlisting, monitoring and secure remote access.
Ability to analyze technical information and develop practical recommendations for technical and nontechnical audiences.
Strong written and verbal communication, stakeholder management, analytical and problem-solving skills.
Ability to manage competing priorities and deliver high-quality work in a collaborative consulting environment.
Ability to work with cross-functional teams spanning engineering, operations, IT and cybersecurity.
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Industrial Automation or a related field, or equivalent relevant experience.
Approximately 3 or more years of relevant cybersecurity, OT security, industrial automation or related experience.
Experience performing or supporting OT cybersecurity assessments, architecture reviews, risk analysis, security design or implementation activities.
Knowledge of OT and ICS environments and systems such as SCADA, DCS, PLC, RTU or HMI.
Familiarity with ISA/IEC 62443, NIST SP 800-82, NIST CSF or comparable cybersecurity guidance.
Experience producing professional reports, presentations, technical documentation or architecture artifacts.
Ability and willingness to travel based on client and project needs.

Nice To Haves

Hands-on experience with OT monitoring, asset visibility or threat detection platforms such as Nozomi Networks, Claroty, Dragos, Armis, Microsoft Defender for IoT, Cisco Cyber Vision or comparable technologies.
Experience in power and utilities, oil and gas, manufacturing, chemicals, mining, transportation, water or other critical infrastructure sectors.
Experience with industrial protocols such as Modbus, DNP3, OPC, OPC UA, EtherNet/IP, CIP, PROFINET or IEC 61850.
Experience with OT incident response, vulnerability management, security testing, threat modeling or transition-to-operations activities.
Relevant certifications such as GICSP, ISA/IEC 62443, GRID, CISSP, CISM, CISA, Security+, CCNA or comparable credentials.

Responsibilities

Conduct OT cybersecurity maturity assessments, risk assessments, gap analyses, security audits, architecture reviews and vulnerability assessments.
Assess industrial environments that may include ICS, SCADA, DCS, PLC, RTU, HMI, SIS and IIoT technologies, industrial networks and supporting infrastructure.
Review OT network architectures, segmentation approaches, zones and conduits, firewall rules, secure remote access, system hardening, asset visibility and monitoring capabilities.
Support the development of OT cybersecurity strategies, roadmaps, policies, standards, procedures, reference architectures and implementation plans.
Design and support implementation of OT security solutions while considering safety, availability, reliability and operational constraints.
Apply frameworks and standards such as ISA/IEC 62443, NIST SP 800-82 and NIST CSF. Apply sector-specific guidance when relevant.
Participate in and facilitate client interviews, workshops and technical discussions with engineering, operations, maintenance, IT and cybersecurity stakeholders.
Prepare clear client deliverables, technical documentation, architecture diagrams, executive presentations and prioritized recommendations.
Lead defined workstreams and support project planning, status reporting, risk and issue tracking, resource planning and budget monitoring.
Collaborate with engagement leadership and multidisciplinary teams. Guide and mentor junior team members where appropriate.
Contribute to proposals, client presentations, reusable assets, thought leadership and identification of additional client needs.
Stay current on OT threats, vulnerabilities, industrial attack techniques, technologies and regulatory developments.