OT Cybersecurity Specialist

Purpose/Objective

The OT Cybersecurity Specialist is responsible for supporting the implementation, monitoring, and management of cybersecurity measures for the organization’s Operational Technology (OT) systems.
This role involves securing industrial control systems (ICS), SCADA systems, and other OT assets from cyber threats, conducting vulnerability assessments, monitoring networks for anomalies, and responding to security incidents.
The OT Cybersecurity Specialist will work closely with other IT and cybersecurity teams to ensure a robust and secure OT environment.

Key Responsibilities of Role

OT Cybersecurity Specialist OT Cybersecurity Monitoring and Incident Response: Monitor and analyze the security of OT systems, networks, and industrial control devices for potential threats and vulnerabilities.
Assist in investigating and responding to OT cybersecurity incidents, including identifying, containing, and remediating incidents.
Help with the development and implementation of incident response plans specific to OT environments.
Vulnerability Management: Conduct regular vulnerability assessments and scans of OT systems to identify potential security risks.
Work with the OT and IT teams to implement necessary patches, updates, and mitigation strategies to reduce risk exposure.
Perform penetration testing and risk assessments on OT systems and assist in securing system configurations.
Security Controls Implementation: Implement and maintain security measures such as firewalls, intrusion detection systems (IDS), and access controls within OT environments.
Assist with network segmentation, secure remote access, and other security controls specific to OT infrastructure.
Ensure that security tools and controls are properly configured and continuously monitored.
Collaboration with IT and Operational Teams: Collaborate with the IT security team to integrate OT systems into the broader enterprise security strategy.
Work with OT operations teams to ensure cybersecurity measures are aligned with operational requirements and do not disrupt production.
Coordinate with engineering teams to ensure that new OT devices or systems meet cybersecurity standards before deployment.
Continuous Improvement: Stay up to date with the latest cybersecurity threats, vulnerabilities, and technologies related to OT systems.
Recommend improvements to OT security policies, procedures, and technologies based on industry trends and best practices.
Assist in the evaluation of new cybersecurity tools, technologies, and processes to enhance the OT security posture.
Key Stakeholders - Internal OT Operations Team System Administrators and Operations Facilities Management Internal Auditors IT Team Key Stakeholders - External External Auditors Managed Security Service Providers (MSSPs) Consultants Incident Response Service Providers Third-Party OT Solution Providers

Technical Competencies

Cybersecurity Governance & Compliance-CYS,Cybersecurity Program & Strategy Management-CYS,Data Protection & Data Loss Prevention-CYS,Identity & Access Management-CYS,Network Security & Perimeter Defense-CYS,Operational Technology & Industrial Control System Security-CYS,Research and Innovation-CYS,Security Assessment and Testing-CYS,Security Engineering & Architecture-CYS

Qualifications and Experience

Educational Qualification: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
Advanced degree (e.
g.
, Master's, MBA) in Cybersecurity, Information Assurance, or a relevant discipline is highly desirable.
Certification: Relevant certifications such as GIAC GICSP, Certified SCADA Security Architect, or other cybersecurity certifications are preferred.
Work Experience (Range of years): 5+ years of overall experience , with at least 2 years focused on OT or industrial control systems security.