Job Description & Key Responsibility

Cybersecurity Audit:

•Verification and validation of the audit checklists as per the developed framework

•Understands the frameworks and recommends applicable controls specific to the environment and systems

•Develop Audit reports

•Identify the gaps and coordinate with the stakeholders for closure of gaps

Assessment:

•Perform cybersecurity criticality assessment of the OT systems

•Perform vulnerability assessments of the OT systems

•Categorize the risks

•Benchmark the cybersecurity system state as per ISA/IEC 62443 / NIST

•Identify the gaps to reach desired SL level

•Recommend the mitigation actions as per the assessment

•Experience of penetration in a control systems environment

• Assess and validate security configurations and access to security infrastructure tools

Implementation:

•Perform the hardening of the OT systems and network

•Liaison with the OT asset owners for implementation activities

•Site planning for performing these activities

•Perform risk assessment of the implementation activities and identify the mitigation measure for smooth implementation on site

Required Qualifications & Experience

•Bachelor’s degree from an accredited university or college/ Degree in Engineering (Electrical, Instrumentation, Computer Science, or similar scientific/technical field)

•Strong understanding of cybersecurity frameworks for Integrated control systems and Operational technology (ICS/OT) environments (ISA-99/IEC 62443, NIST SP 800-82, CIS, etc.)

•Strong understanding of OT network communication protocols, industrial networking topologies, as well as L2/L3 networking and architecture.

•A minimum of five (5) years of “hands-on” experience deploying, assessing, designing, and implementing ICS/OT solutions.

•Experience of OT Industrial Control Systems which may include one or more of the following technologies; DCS, SCADA, PLCs, HMI, Data Historians including OSI PI, EDNA, Wonderware

•

•Have at least the following certificates:

•ISA/IEC 62443 Cybersecurity Specialist certification,

•Global Information Assurance Certificate (GIAC) (e.g., GICSP)

•Certified Information Systems Security Professional (CISSP).