OT Cybersecurity Senior Consultant

The OT Cybersecurity Consultant will play a key role in developing and implementing robust cybersecurity strategies for industrial control systems (ICS) and operational technology (OT) environments. This role will involve assessing security risks, designing tailored cybersecurity architectures, advising clients on best practices, and ensuring compliance with industry regulations.

Key Responsibilities

- Design and implement cybersecurity architectures tailored to protect OT environments, including ICS, SCADA, PLCs, DCS, and other industrial systems. Ensure that these architectures align with both client-specific needs and industry standards (e.g., NIST, IEC 62443, ISO 27001).

- Conduct cybersecurity risk assessments for OT systems to identify vulnerabilities, threats, and weaknesses. Develop and recommend mitigation strategies to minimize risk exposure and optimize security posture.

- Provide expert consulting services to clients on OT cybersecurity best practices, including network segmentation, asset management, incident response, and compliance. Advise on the adoption of technologies, security frameworks, and policies to enhance OT security.

- Assist clients in meeting relevant cybersecurity compliance requirements, such as NERC CIP, IEC 62443, HIPAA, GDPR, and other regional or industry-specific regulations. Lead efforts in ensuring that OT security controls are compliant with these standards.

- Develop and implement OT incident response plans. Support clients in responding to and recovering from cybersecurity incidents or breaches within their OT environments.

- Develop and deliver training programs for client teams on OT cybersecurity awareness, risk mitigation, and emergency response procedures.

- Work closely with clients to understand their specific OT challenges and requirements, providing tailored cybersecurity solutions. Build and maintain strong client relationships, ensuring customer satisfaction and ongoing security improvements.

- Stay up-to-date on the latest OT cybersecurity trends, threats, and technologies. Provide recommendations for continuous improvement of clients cybersecurity posture.

Requirements

- Bachelor's degree in Cybersecurity, Computer Science, Engineering, or a related field. Advanced degree (Master's or PhD) is a plus.

- Minimum of 7 years of experience in cybersecurity, with at least 3 years focused on OT/ICS security.

- Proven experience designing and implementing cybersecurity architectures for industrial control systems (ICS), SCADA systems, PLCs, and other OT technologies.

- Experience with OT cybersecurity frameworks such as NIST SP 800-82, IEC 62443, NERC CIP, and ISA/IEC 62443.

- Certified Information Systems Security Professional (CISSP) or similar general cybersecurity certifications.

OT-specific certifications (e.g., Certified IEC62443, GICSP) are highly desirable.

- Proficiency in OT protocols (Modbus, DNP3, OPC, etc.), ICS/SCADA network architectures, and the integration of IT and OT environments.

- Experienced with firewalls, IDS/IPS, SIEM, and other cybersecurity tools tailored for OT.

- Strong analytical and problem-solving skills, with the ability to assess complex security challenges and propose practical solutions.

- Excellent communication skills, with the ability to translate technical concepts for non-technical stakeholders.

- Strong project management skills, with experience leading cross-functional teams and managing client engagements.

- Ability to work independently and as part of a team in a fast-paced, dynamic environment.

By responding to Yokogawa's advertisement, consent is considered given to Yokogawa to collect the required personal data for the purpose of recruitment with expectation that Yokogawa will protect personal data with security safeguards that are reasonable and appropriate to the sensitivity of the personal data, to protect it from unauthorized access, use or disclosure and complies with applicable regulatory requirements with respect to the retention of personal data.

We regret to inform that only shortlisted candidates will be notified.