Operational Technology Security Consultant

Maintain current knowledge of OT security standards, regulatory developments, and industry trends through ongoing professional development and relevant certifications

Support and guide OT risk and security discussions with technical teams, operations staff, and executive stakeholders

Conduct stakeholder interviews and review OT-related policies, procedures, architecture documentation, and compliance records to understand organizational OT environments and priorities

Assess client environments against OT security practices and compliance posture against IEC 62443, NIST SP 800-82, NIST CSF, NERC CIP, NIS2 Directive, EU Cyber Resilience Act, C2M2, and other relevant OT standards and frameworks

Develop maturity assessment and benchmarking reports identifying OT security gaps, current state findings, and prioritized remediation recommendations

Develop sequenced remediation roadmaps with prioritized activities, timelines, and implementation guidance to address identified OT security gaps

Advise clients on OT security program structure, governance frameworks, organizational roles and responsibilities, and recommended policies and procedures

Present assessment findings, risk analysis, and strategic recommendations to clients and their leadership through executive briefings and detailed reports

Support other Cyber Risk Advisory consulting engagements when necessary to maintain team capacity