Cyber - Operational Technology - Senior - Consulting

Location:

Anywhere in Country

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

Industrial and critical infrastructure organizations are strengthening cybersecurity as Operational Technology environments become more connected and exposed to changing threats. They need professionals who can understand industrial systems, work across engineering and cybersecurity teams, and turn technical analysis into practical improvements.

• Conduct OT cybersecurity maturity assessments, risk assessments, gap analyses, security audits, architecture reviews and vulnerability assessments.
• Assess industrial environments that may include IC(S), SCADA, DCS, PLC, RTU, HMI, SIS and IIoT technologies, industrial networks and supporting infrastructure.
• Review OT network architectures, segmentation approaches, zones and conduits, firewall rules, secure remote access, system hardening, asset visibility and monitoring capabilities.
• Support the development of OT cybersecurity strategies, roadmaps, policies, standards, procedures, reference architectures and implementation plans.
• Design and support implementation of OT security solutions while considering safety, availability, reliability and operational constraints.
• Apply frameworks and standards such as ISA/IEC 62443, NIST SP 800-82 and NIST CSF. Apply sector-specific guidance when relevant.
• Participate in and facilitate client interviews, workshops and technical discussions with engineering, operations, maintenance, IT and cybersecurity stakeholders.
• Prepare clear client deliverables, technical documentation, architecture diagrams, executive presentations and prioritized recommendations.
• Lead defined work streams and support project planning, status reporting, risk and issue tracking, resource planning and budget monitoring.
• Collaborate with engagement leadership and multidisciplinary teams. Guide and mentor junior team members where appropriate.
• Contribute to proposals, client presentations, reusable assets, thought leadership and identification of additional client needs.
• Stay current on OT threats, vulnerabilities, industrial attack techniques, technologies and regulatory developments.

• Strong understanding of OT and IC(s) cybersecurity principles, industrial control environments and the operational impact of security decisions.
• Working knowledge of industrial network architectures, common protocols and controls such as segmentation, firewalls, IDS or IPS, allow listing, monitoring and secure remote access.
• Ability to analyze technical information and develop practical recommendations for technical and nontechnical audiences.
• Strong written and verbal communication, stakeholder management, analytical and problem-solving skills.
• Ability to manage competing priorities and deliver high-quality work in a collaborative consulting environment.
• Ability to work with cross-functional teams spanning engineering, operations, IT and cybersecurity.

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Industrial Automation or a related field, or equivalent relevant experience.
• Approximately 3 or more years of relevant cybersecurity, OT security, industrial automation or related experience. HR should calibrate the final threshold to the approved U.S. rank and compensation structure.
• Experience performing or supporting OT cybersecurity assessments, architecture reviews, risk analysis, security design or implementation activities.
• Knowledge of OT and IC(s) environments and…