We are looking for IEC 62443 experts (multiple roles) for industrial asset owners and product manufacturers. The role covers plant and site security under IEC 62443-2-1, 3-2 and 3-3, and product security under IEC 62443-4-1 and 4-2. You will own technical delivery, client relationships and the quality of work products.

Key responsibilities:

• Lead security risk assessments of industrial control systems, including zone and conduit partitioning and target security level determination under IEC 62443-3-2.
• Assess existing systems against IEC 62443-3-3 system requirements and define prioritised remediation roadmaps.
• Assess and develop asset owner security programmes under IEC 62443-2-1, including asset inventory, patch management, secure remote access and incident response.
• Review plant network architectures, segmentation and third-party access arrangements.




• Assess integration and maintenance service providers against IEC 62443-2-4.
• Assess and implement secure development lifecycle processes under IEC 62443-4-1.
• Perform threat modelling and derive component security requirements under IEC 62443-4-2 for controllers, gateways, embedded and connected devices.
• Define security verification and validation plans and coordinate penetration and fuzz testing with the laboratory.
• Prepare clients for product and process certification and coordinate with certification bodies.
• Map IEC 62443 work products to the EU Cyber Resilience Act and related regulations where clients sell into Europe.

📌 Industrial and Product Security (Bengaluru)
🏢 CyMobility
📍 Bengaluru