09 Sep
|
Sharp & Tannan
|
India
09 Sep
Sharp & Tannan
India
Key Responsibilities
IT Security Audit Execution
· IT (General controls ) testing with the GRC | Assurance Teams for the IFC compliance Perform
Plan, scope, and conduct internal IT security audits for 8–12 manufacturing clients annually.
Assess IT environments (Active Directory, firewalls, patch management, privileged access, MFA, logging/SIEM).
Evaluate OT/IoT security where IT systems connect to production networks (PLCs, HMIs, SCADA, historians).
Review compliance with ISO 27001, NIST CSF, IEC 62443-2-1, and GDPR (where applicable).
Perform audit procedures including:
Control testing (technical & administrative)
Vulnerability assessment (non-intrusive)
Configuration reviews (switches, firewalls, servers)
Access control & user entitlement reviews
Backup & disaster recovery validation
Identify gaps in network segmentation between office IT and shop-floor OT.
Reporting & Remediation
Document findings with explicit risk ratings (Critical, High, Medium, Low).
Provide manufacturing-specific recommendations (e.g.,
“air gap backup recovery,” “replace unsupported Windows 7 on HMI”).
Present audit reports to plant managers and IT leadership.
Track remediation progress and perform limited validation re-audits.
Compliance & Standards
Map audit findings to regulatory requirements (e.g., CMMC, NIS2 if applicable).
Support clients during external audits or insurance cyber assessments.
Collaboration
Work with client maintenance and controls engineers (non-security personnel) to explain risks without jargon.
Escalate critical findings (e.g., ransomware exposure via exposed RDP on a production server) immediately.
Requirements
Experience
3–5 years in IT security auditing or security consulting – with at least 1 year directly auditing manufacturing, industrial, or logistics companies.
Hands-on experience auditing: Active Directory, firewalls (rule base review), Windows/Linux servers, backup solutions, and endpoint AV/EDR.
Familiarity with industrial protocols (Modbus, PROFINET, OPC U
📌 IT Security Consultant (India)
🏢 Sharp & Tannan
📍 India