Senior OT Cybersecurity Risk Analyst

This role is designed for someone who enjoys working at the intersection of people, technology, and operations — helping teams understand risk, make informed decisions, and move work forward securely, efficiently and confidently.

In this role, you will partner closely with the business, infrastructure, and OT teams to understand how systems are used in the real world and how cybersecurity can best support reliability, security, and business outcomes. You will help translate vulnerabilities, security findings, and technical risks into clear, actionable insights that leaders and operators can use — not just reports that sit on a shelf.

Your work will focus on enablement and clarity, not gatekeeping.

• Act as a trusted partner to the various business
• Translate cybersecurity risks (e.g., vulnerabilities, OT exposures) into business‑relevant impact and options
• Support decision‑making by framing risk, tradeoffs, and remediation paths, not just control gaps
• Assist with security reviews for OT environments, and hybrid IT/OT architectures
• Partner with engineering and operations teams to understand how systems are actually used, not just how they’re designed
• Support secure integration of new assets, vendors, or acquisitions into existing environments
• Helping prioritize remediation based on operational impact and risk
• Tracking remediation commitments and timelines
• Identifying recurring patterns or systemic issues
• Contribute to risk assessments, exception reviews, and documentation in collaboration with Cyber teams
• Gather, document, and clarify security requirements in a way that is usable by non‑security teams
• Create clear summaries, risk narratives, and visuals for leadership and stakeholders
• Help standardize repeatable processes and templates to reduce friction and rework

Experience in one or more of the following:

• OT, IC, or industrial environments
• Gas, energy, utilities, or critical infrastructure operations
• IT infrastructure, networking, or systems administration
• Cybersecurity, risk management, or vulnerability management

• Strong ability to analyze complex problems and communicate clearly
• Comfort working across technical and non‑technical audiences
• Curiosity, learning mindset, and willingness to ask “why”
• Self-starter with little to no guidance to work with various teams
• Ability to create reports, metrics and analyses that convey the message succinctly and accurately