Job Description

The Operational Technology (OT) Cybersecurity Risk Analyst is a specialized role within the cybersecurity team, focused on assessing and managing cyber risks specific to operational technology environments.

Key Responsibilities:

• OT Cybersecurity Risk Assessment: Conduct comprehensive risk assessments of operational technology environments to identify cybersecurity threats, vulnerabilities, and potential consequences to critical infrastructure and industrial processes.
• Threat Monitoring and Intelligence: Stay informed about the latest OT-specific cyber threats, vulnerabilities, and attack techniques through threat intelligence sources and industry-specific information sharing platforms.
• Vulnerability Identification: Analyze and evaluate the security posture of OT assets, such as ICS devices and SCADA systems, to identify weaknesses and potential entry points for attackers.
• Risk Mitigation Strategies: Develop and recommend risk mitigation strategies and countermeasures to address identified vulnerabilities and potential cyber threats in OT systems.
• Security Compliance and Standards: Ensure compliance with relevant cybersecurity standards and regulations specific to operational technology environments, such as NIST SP 800-82, IEC 62443, and other industry-specific guidelines.
• Incident Response Planning: Collaborate with incident response teams to develop and test incident response plans tailored to OT environments, ensuring effective response to cybersecurity incidents.
• Security Awareness and Training: Provide specialized cybersecurity training and awareness programs for OT personnel to enhance their understanding of cybersecurity risks and best practices.
• Security Architecture Review: Evaluate the security design of OT systems and participate in the review of new OT projects to incorporate security controls from the outset.
• Vendor and Third-Party Risk Management: Assess the cybersecurity posture of OT vendors and third-party partners, ensuring that their products and services meet the organization\'s security requirements.
• Security Metrics and Reporting: Develop and present regular cybersecurity risk reports to management and relevant stakeholders, providing insights into the organization\'s OT security posture and risk exposure.

Required Skills and Qualifications:

• In-depth knowledge of operational technology environments, including industrial control systems, SCADA, PLCs, and related protocols.
• Familiarity with cybersecurity principles, best practices, and industry-specific standards for OT environments.
• Proficiency in conducting risk assessments and vulnerability assessments in OT systems.
• Understanding of OT-specific threats and attack vectors, such as ransomware targeting industrial systems.
• Strong analytical and problem-solving skills, with the ability to assess complex OT cybersecurity risks.
• Knowledge of cybersecurity frameworks and compliance standards relevant to operational technology.
• Effective communication skills to convey technical information to both technical and non-technical stakeholders.
• Experience with cybersecurity tools and technologies specific to OT, such as ICS monitoring solutions and anomaly detection systems.
• Ability to work collaboratively with cross-functional teams, including IT, OT engineering, and operations.

Educational Requirements:

A bachelor\'s degree in cybersecurity, computer science, electrical engineering, or a related field is typically required for an OT Cybersecurity Risk Analyst role. Relevant certifications in industrial cybersecurity, such as the Global Industrial Cyber Security Professional (GICSP), Certified SCADA Security Architect (CSSA), or other ICS/SCADA-specific certifications, are highly valued.

Reg No. R22110166
BeathChapman Pte Ltd
Licence no. 16S8112

eFinancialCareers