Cyber Security Consultant - OT

Job Profile:
Senior Manager, Cyber Risk Consulting, Marsh

Location:

Mumbai & Gurgaon
MMC Business Unit:
Marsh
MMIPL Function:
Knowledge Services

Marsh  is a global leader in insurance broking and risk management. In more than 130 countries, our experts in every facet of risk and across industries help clients to anticipate, quantify, and more fully understand the range of risks they face.

Marsh Risk Consulting  is the consultative branch of Marsh, which operates internationally and provides solutions in the increasing needs of our clients to implement risk management programs within their organization.
Marsh  Risk Consulting  helps companies to change their risk profiles so they can improve resiliency, reduce claims, and minimize the total cost of risk. Businesses today regularly tackle multiple challenges, whether facing property and casualty, cyber, reputational, or other risks, Marsh  Risk Consulting  can help.

The global  Cyber Risk Consulting  (CRC) practice of Marsh  Risk Consulting  supports customers to understand, estimate and mitigate cyber risks. This role is open in Marsh McLennan India Private Limited (MMIPL) a global in-house center for MMC Group. The MMIPL in Mumbai has a function called ‘Knowledge Services which supports the MMC group by providing specialized services. Under the Knowledge Services function, there is Marsh  Risk Consulting  team, which supports the global clients and colleagues.

This role will initiate a new service line for Marsh  Risk Consulting  team in Mumbai, which entails supporting the CRC colleagues in execution of the cyber consulting projects.

What can you expect?
Collaborate with the CRC practice in India, Middle East and Africa (IMEA) for delivery of the practice's value proposition in the regions.
Provide complete support to delivery of the desired deliverables as per the agreed scope of work with the client, and provide an efficient delivery model for Marsh CRC practice
Play a key role in leading the delivery of multiple CRC projects
Responsible for review and training of junior colleagues to ensure the deliverable is as per the expected quality framework.
Moderate travel within India, Middle East, and Africa (IMEA) region for client engagements and collaboration with the CRC practice.

We will count on you to:
Support the IMEA CRC practice, and be hands-on in delivery of the consulting projects and mentor the junior colleagues in their projects
Prepare deliverables for cyber consulting practice under the guidance of the CRC practice
Conduct research on the clients cybersecurity risk areas and prepare a point of view for consulting
Support the team towards constant innovation of cybersecurity approach and go-to-market strategy
Quick learner of the CRC practices’ procedures and policies, and is able to explain the same to non-technical clients/colleagues
Understand different domains within cybersecurity space and demonstrate passion
Is on track to build specialization to demonstrate specialist knowledge in cybersecurity
Contribute in research support for building a robust CRC practice deliverables
Will be responsible to maintain key project track record and detailed process documentations
Delivery of the projects would be done either remotely or onsite depending on the client requirement
Ability to motivate the team members and take the high road to ensure client success
Build proposals and pitch to potential clients, including developing compelling presentations and effectively communicating the value proposition of the Cyber Risk Consulting practice.

What you need to have:
The candidate must possess the following attributes:
6  to 8 years of professional experience in the cybersecurity consulting domain in Big 4 or boutique firms;
At least one of the following Professional OT cyber security certifications (e.g. ISA/IEC 62443, EXIDA CACS, GICSP, ISO 27001 or Security+) would be mandatory;
Expertise in OT security principles and controls. Candidate should ideally have hands-on experience in conducting OT Cyber risk assessments, designing cyber security frameworks (including policies, and procedures), implementations, audits, vendor risk management and user awareness training.
kn…