Estuate - Business Analyst - Operational Technology

Job Title OT (Operational Technology) Business Analyst

Role Summary The OT Business Analyst will bridge the gap between industrial operations and enterprise IT/security teams by gathering, analyzing, and translating requirements across OT environments (ICS/SCADA). This role supports initiatives such as OT visibility, cybersecurity, asset management, and integration with enterprise platforms while ensuring safety, availability, and regulatory compliance.

Key Responsibilities OT Domain & System Understanding:

• Document and analyze OT architecture aligned to the Purdue model (Levels 0-5).
• Work with core OT components:
• Field devices: Sensors, actuators.
• Control systems: PLCs, RTUs, DCS.
• Supervisory systems: SCADA, HMI.
• Operations layer: Historians, engineering workstations.
• Integration layer: DMZ, gateways, jump servers.
• Capture dependencies across network protocols (Modbus, OPC-UA, PROFINET).

Requirements Gathering & Analysis

• Elicit and document business, functional, and technical requirements for OT initiatives.
• Translate OT engineer inputs into business-readable deliverables (BRDs, user stories).
• Conduct workshops with plant operations, engineering, and cybersecurity teams.
• Create process flows, use cases, and current/future state architectures.

OT Cybersecurity & Risk Support

• Support initiatives aligned to NIST CSF, IEC 62443, NERC CIP.
• Capture requirements for:
• OT asset discovery (e.g., Tenable OT, Claroty, Nozomi).
• Network segmentation and IDMZ design.
• Vulnerability management in OT environments.
• Assist in risk assessments, control mapping, and audit readiness documentation.

Asset Visibility & Data Management

• Define and validate OT asset inventory requirements (non-CMDB environments).
• Ensure data consistency across tools (Tanium, Tenable, ServiceNow CMDB).
• Support reporting and dashboards for OT risk posture.

Integration & Digital Transformation

• Gather requirements for integrating OT with enterprise platforms:
• SIEM (Splunk), data lakes (Snowflake, Databricks).
• ITSM tools (ServiceNow).
• Support API, gateway, and secure IT/OT integration patterns (Level 3.5 DMZ).

Stakeholder & Governance Management

• Act as liaison between OT engineers, IT teams, vendors, and leadership.
• Manage conflicting priorities (e.g., uptime vs patching).
• Support governance frameworks, change management, and operational workflows.

Incident, Risk & Compliance Support

• Document incident response workflows for OT environments.
• Assist in business continuity and disaster recovery planning.
• Translate technical risks into executive-level summaries and dashboards.

Required Skills & Experience OT / ICS Knowledge (Core):

• Strong understanding of:
• ICS/SCADA environments.
• PLCs, RTUs, DCS, HMI systems.
• Industrial networks and protocols.
• Familiarity with Purdue Model & OT segmentation concepts.
• Knowledge of OT constraints (availability, safety-first design).

Business Analysis Skills

• Expertise in:
• Requirements gathering (Agile/Waterfall).
• Documentation: BRD, FRD, user stories, acceptance criteria.
• Process mapping (Visio, Lucidchart).
• Stakeholder engagement and workshop facilitation.
• Experience with Jira, Confluence, ServiceNow.

Security & Compliance

• Exposure to OT cybersecurity tools and frameworks.
• Understanding of:
• Vulnerability management in OT.
• Risk prioritization vs production impact.
• Experience supporting audits and compliance initiatives.

Data & Reporting

• Ability to define KPIs and metrics for:
• OT risk posture.
• Asset coverage and visibility.
• Experience with Power BI / dashboards preferred.

Preferred Qualifications

• Experience in industries like energy, utilities, manufacturing, oil & gas.
• Certifications (nice to have):
• CBAP / CCBA.
• GICSP / CISSP / ISA/IEC 62443.
• Exposure to Tenable OT, Nozomi, Claroty, Tanium.

Key Competencies

• Strong communication translating technical OT business insights.
• Ability to operate in high-risk, regulated environments.
• Balancing security, safety, and uptime constraints.
• Structured, analytical, and solution-oriented thinking. (ref:hirist.tech)