Cybersecurity Analyst – OT Compliance

Location:

Findlay, Ohio (Remote)

The Cybersecurity Analyst will support the OT Compliance team within a midstream IT organization. The ideal candidate brings an understanding of OT and Cybersecurity frameworks such as NIST and IEC 62443, with hands-on experience in compliance programs. This role requires communication skills to engage stakeholders, promote a culture of security and compliance across operational technology environments, and translate internal and regulatory requirements into practical security measures.

The Cybersecurity Analyst will perform gap analyses to evaluate the current state of OT security against required compliance frameworks and standards. This involves mapping existing controls to applicable requirements, identifying deficiencies, and assessing risk. The analyst will gather and analyze evidence through system configurations, documentation reviews, and stakeholder interviews to validate control implementation.

• Conduct gap analysis of Operational Technology (OT) environments against established compliance framework.
• Analyze current-state OT environment, policies, and controls to identify deficiencies, weaknesses, and areas of non-compliance.
• Conduct structured interviews with system and process owners to gather evidence of compliance or non-compliance.
• Develop clear, actionable gap analysis reports outlining findings, risk levels, and prioritized remediation recommendations.
• Collaborate cross-functionally with business partners to validate findings and develop remediation strategies within operational constraints.

• Bachelor’s degree in Cybersecurity, Information Technology, Engineering, Computer Information Systems or a related field (or equivalent practical experience).
• 3+ years of experience in cybersecurity, with at least 2 years supporting Operational Technology (OT), Industrial Control Systems (ICS), or SCADA environments.
• Willingness and ability to travel up to 50% to support on-site assessments, stakeholder interviews, and evidence collection at operational facilities and translate findings into clear, actionable reports.
• Knowledge of OT cybersecurity frameworks and standards, including IEC 62443, NIST SP 800-82, and relevant regulatory requirements.
• Experience conducting or participating in security or compliance assessments, gap analyses, or audits within OT or critical infrastructure environments.

• Experience working in the oil and gas industry.
• Hands-on experience leading OT cybersecurity gap assessments programs aligned to cybersecurity frameworks such as NIST CSF, IEC 62443 or similar cybersecurity or regulatory frameworks.
• Knowledge of Purdue Model architecture and its application to network segmentation in industrial environments.
• Experience with developing remediation plans and tracking risk reduction across OT environments.
• Familiarity with OT cybersecurity tools and their use within the OT environment (e.g., asset discovery, network monitoring, firewalls, endpoint protection).
• Advanced certifications such as GICSP, CISSP, CISM, or ISA/IEC 62443 Cybersecurity Expert.

Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers an HSA (Health Savings Account on the HDHP plan), a Support Linc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other…