Cybersecurity Analyst - OT Compliance

Description

The Cybersecurity Analyst will support the OT Compliance team within the Midstream IT organization. The ideal candidate brings a strong understanding of OT, Cybersecurity frameworks such as NIST and IEC 62443, with some hands-on experience with compliance programs. This role requires strong communication skills to engage stakeholders and promote a culture of security and compliance across operational technology environments and can translate internal and regulatory requirements into practical security measures.

The Cybersecurity Analyst will perform comprehensive gap analyses to evaluate the current state of OT security against required compliance frameworks and standards. This involves mapping existing controls and processes to applicable requirements, identifying deficiencies or missing controls, and assessing the level of risk associated with each gap. The analyst will gather and analyze evidence through system configurations, documentation reviews, and stakeholder interviews to validate control implementation and effectiveness

Key Responsibilities
- Conduct gap analysis of Operational Technology (OT) environments against established compliance framework.

- Analyze current-state OT environment, policies, and controls to identify deficiencies, weaknesses, and areas of non-compliance
- Conduct structured interviews with system and process owners to gather evidence of compliance or non-compliance
- Develop clear, actionable gap analysis reports outlining findings, risk levels, and prioritized remediation recommendations.

- Collaborate cross-functionally with business partners to validate findings and develop remediation strategies within operational constraints
- Support user access certification and attestation programs by collecting and validating evidence, facilitating reviewer approvals, resolving exceptions, and maintaining documentation to support audit and compliance activities.

- Lead cybersecurity activities supporting SOX audits, including control testing coordination, evidence management, auditor engagement, issue resolution, and remediation tracking to ensure timely and successful audit outcomes.

- Develops and evaluates efficiency and effectiveness of security processes and controls through creation and maintenance of detailed security and/or compliance reports, as necessary.

- Support regulatory inspections, internal audits and external audits
- Drive continuous improvement of OT cybersecurity compliance processes, tools, and controls.

Skills

Security, Compliance, Information security, Audit, Nist, Vulnerability assessment, Cyber security, Sox, oil & gas, Security policy

Top Skills Details

Security,Compliance,Information security,Audit,Nist,Vulnerability assessment

Additional

Skills & Qualifications

Required Qualifications
- Bachelor's degree in Cybersecurity, Information Technology, Engineering, Computer Information Systems or a related field (or equivalent practical experience) - 3+ years of experience in cybersecurity, with at least 2 years supporting Operational Technology (OT), Industrial Control Systems (ICS), or SCADA environments.

- Willingness and ability to travel up to 50% to support on-site assessments, stakeholder interviews, and evidence collection at operational facilities and translate findings into clear, actionable reports.

- Strong knowledge of OT cybersecurity frameworks and standards, including IEC 62443, NIST SP 800-82, and relevant regulatory requirements
- Experience conducting or participating in security or compliance assessments, gap analyses, or audits within OT or critical infrastructure environments

Preferred Qualifications
- Experience working in the oil and gas industry
- Hands-on experience leading OT cybersecurity gap assessments programs…