Position Description

Founded in 1976, CGI is among the world's largest independent IT and business consulting services firms. With 94,000 consultants and professionals globally, CGI delivers an end-to-end portfolio of capabilities, from strategic IT and business consulting to systems integration, managed IT and business process services, and intellectual property solutions. CGI works with clients through a local relationship model complemented by a global delivery network that helps clients digitally transform their organizations and accelerate results.

CGI Fiscal 2024 reported revenue is CA$14.68 billion, and CGI shares are listed on the TSX (GIB.A) and the NYSE (GIB). Learn more about us at cgi.com.

Job Title: OT Cybersecurity Expert

Experience: 4+ yrs.

Job Location: Pune

Position ID: J0926-1637

Work Type: Hybrid

Employment Type: Full Time / Permanent

Qualification: Bachelor’s or Master’s degree in Computer Science, Engineering, or a related field.

Role positioning A senior OT cybersecurity profile combining industrial systems knowledge, cybersecurity expertise, client advisory capability and responsibility for delivery quality.

Position Overview

CGI is looking for an experienced OT Cybersecurity Expert to support clients in protecting industrial control environments and critical operational processes. The role spans cybersecurity assessment, architecture, remediation, incident response, governance and technical advisory activities.

The successful candidate will operate at the intersection of cybersecurity, industrial engineering and operational constraints. They will translate cyber risks into actionable security measures while preserving safety, availability, continuity and business requirements.

Core Scope

- OT / ICS SCADA, DCS, PLCs, HMIs and industrial network environments
- Cyber Risk Architecture reviews, vulnerability assessment, risk analysis and remediation
- Security Architecture Segmentation, zoning, secure remote access, network protection and defense in depth
- Standards & Regulation IEC 62443, ISO/IEC 27001, NIST guidance, NIS2, LPM and relevant national guidance
- Operational Delivery Technical recommendations, implementation support, quality assurance and reporting

Key Responsibilities
- Assess OT/ICS environments: audit architectures and industrial systems, review data flows, interfaces and exposure, and identify security weaknesses and attack paths.
- Identify and manage vulnerabilities: assess technical vulnerabilities and security gaps and define proportionate remediation measures adapted to industrial constraints.
- Design secure architectures: define and review OT security patterns including segmentation, zones and conduits, network controls, access control and secure connectivity.
- Support implementation: translate recommendations into practical technical actions and support deployment or configuration of appropriate cybersecurity controls.
- Contribute to incident response: support investigation, containment,



root cause analysis and post incident improvement activities affecting industrial environments.

Responsibilities & Expected Contribution
- OT cybersecurity governance: advise stakeholders on governance models, policies, risk management processes and security roadmaps for industrial environments.
- Compliance and assurance: assess alignment with IEC 62443 and other applicable cybersecurity standards, regulations and security frameworks.
- Technical leadership: act as a senior reference for consultants and auditors, review analyses and recommendations, and validate the technical quality of deliverables.
- Delivery management: contribute to workload estimation, feasibility assessment, activity planning, quality control and reporting for cybersecurity activities.
- Training and awareness: explain OT cyber risks and security practices to technical and non-technical stakeholders and contribute to team capability building.
- Innovation and continuous improvement: contribute to R&D;, technical watch, methodologies, tools and new cybersecurity services for industrial environments.
- Business development support: help shape and extend OT cybersecurity services, capabilities and propositions beyond existing engagements and technologies.

Technical expertise
- Strong understanding of OT/ICS architectures and technologies, including SCADA, DCS, PLCs and HMIs.
- Good knowledge of industrial network architectures, segmentation and security controls.
- Knowledge of industrial protocols such as Modbus, OPC / OPC UA, Profinet and DNP3 is an advantage.
- Strong familiarity with cybersecurity standards and frameworks, particularly IEC 62443, as well as ISO/IEC 27001, NIST guidance, NIS2, LPM and applicable national guidance.
- Ability to understand vulnerabilities, attack scenarios and risk implications in industrial environments and translate them into actionable recommendations.

Professional capabilities
- Autonomous, structured and comfortable handling technically complex topics.
- Able to communicate with engineering, operations, IT, cybersecurity and management stakeholders.
- Strong analytical, synthesis and technical writing skills.
- Able to lead workshops, present findings and defend pragmatic recommendations.
- Fluent professional English, written and spoken
- Certifications related to industrial cybersecurity, OT security, risk management or security architecture are valued, for example IEC 62443 related training/certification, GICSP, CISSP, CISM or equivalent credentials.

Education & experience
- Engineering degree, university degree or equivalent qualification in cybersecurity, computer science, industrial systems,



automation or a related discipline.
- At least 3 years of skilled experience in industrial cybersecurity / OT cybersecurity.
- Experience working with complex operational environments and the constraints associated with safety, availability, legacy technologies and production continuity.

Expected Seniority & Success Criteria
- Technical depth Provides credible, hands on OT cybersecurity expertise and produces technically sound recommendations.
- Pragmatism Balances cybersecurity requirements with industrial safety, availability, legacy and operational constraints.
- Delivery quality Ensures complete, actionable and high quality outputs and contributes to reliable planning and reporting.
- Stakeholder leadership Builds trust with technical and business stakeholders and communicates clearly across disciplines.
- Continuous improvement Turns lessons learned, incidents and field experience into improved methods, architectures and services.

Key Skills at a Glance
- OT / ICS cybersecurity IEC 62443 Security architecture
- OT risk assessment SCADA / DCS / PLC Industrial networks
- Vulnerability management Incident response IT/OT segmentation
- Governance & compliance NIS2 / LPM / ANSSI Technical leadership

CGI is an equal opportunity employer. In addition, CGI is committed to providing accommodation for people with disabilities in accordance with provincial legislation. Please let us know if you require reasonable accommodation due to a disability during any aspect of the recruitment process and we will work with you to address your needs. Your future duties and responsibilities

Required Qualifications To Be Successful In This Role

Together, as owners, let’s turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.

Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.

Come join our team—one of the largest IT and business consulting services firms in the world.

📌 OT Cybersecurity Expert (Bengaluru)
🏢 CGI
📍 Bengaluru