We are seeking an experienced OT/ICS Cybersecurity Assessment Consultant with 5-8 years of experience in cybersecurity assessments, compliance reviews, risk analysis, and security gap assessments for industrial control systems and OT environments. The candidate will evaluate existing OT cybersecurity controls, identify vulnerabilities and compliance gaps, assess risks, and recommend remediation measures in accordance with IEC 62443, NIST SP 800-82, and industry best practices.

Key Responsibilities
• Conduct OT/ICS cybersecurity assessments, audits, and gap assessments.
• Assess industrial environments against IEC 62443 requirements and NIST SP 800-82 guidance.
• Review existing OT network architecture and Purdue model segmentation.
• Evaluate firewall configurations, network access controls, and IT/OT security boundaries.
• Assess Active Directory, Group Policy, privileged access, and user account management.
• Review WSUS, patch management processes, and endpoint security controls.
• Evaluate EDR/AV coverage, configuration, and monitoring effectiveness.
• Assess backup and recovery strategies, backup security, and disaster recovery readiness.
• Review SIEM and NIDS capabilities, security logging, alerting, and incident detection processes.
• Perform vulnerability assessments, analyze findings, and prioritize risks based on severity and operational impact.
• Evaluate Windows and Linux hardening against recognized security baselines.
• Conduct OT asset inventory reviews, risk assessments, and security control maturity evaluations.
• Identify compliance gaps and develop risk-based remediation roadmaps.
• Prepare assessment reports, risk registers, compliance matrices,



and management presentations.
• Engage with IT, OT, engineering, and plant operations teams to validate findings and agree on remediation priorities.
• Support internal audits, customer audits, and cybersecurity improvement programs. Required Technical Skills
• Strong understanding of IEC 62443, NIST SP 800-82, and Purdue architecture.
• Experience in OT/ICS cybersecurity assessments and compliance gap analysis.
• Knowledge of industrial network security, firewalls, segmentation, and secure remote access.
• Understanding of Active Directory, WSUS, EDR/AV, backup, SIEM, and NIDS.
• Experience with vulnerability assessment, vulnerability management, and risk prioritization.
• Knowledge of Windows and Linux security hardening and configuration baselines.
• Ability to review network diagrams, security policies, technical configurations, and system architecture.
• Robust documentation, technical report writing, and stakeholder communication skills.
• Understanding of industrial control systems, SCADA, DCS, PLCs, and industrial communication protocols. Qualifications
• Bachelor's degree in engineering, Computer Science, Information Technology, Cybersecurity, or a related field.
• 5-8 years of relevant experience in OT/ICS cybersecurity, security assessment, risk management, or compliance.




• Demonstrated experience preparing cybersecurity assessment reports, gap analyses, and remediation recommendations.
• Candidate with consulting and advisory experience. Ideally, the candidate should have an OT cybersecurity engineering background and have transitioned into a consulting and advisory role. Required Technical Skills
• Experience conducting cybersecurity assessments, audits, or compliance reviews across industries such as Oil & Gas, Petrochemical, Power Generation & Distribution, Water & Wastewater, Marine & Offshore, Manufacturing, and Mining & Metals.
• Familiarity with industrial automation and control system platforms from vendors such as Rockwell Automation, Siemens, Schneider Electric, ABB, Emerson, Honeywell, Yokogawa, GE Vernova, and Mitsubishi Electric.
• Experience assessing the security of PLC, SCADA, DCS, HMI, industrial servers, and OT networks is an added advantage. Preferred Candidate Profile
• Strong understanding of OT cybersecurity standards, industrial control systems, and risk assessment methodologies.
• Experience conducting independent cybersecurity assessments in industrial environments.
• Strong analytical skills and the ability to translate technical findings into actionable remediation plans.
• Ability to work with multidisciplinary engineering, IT, OT, and compliance teams.
• Excellent technical report writing, documentation, and presentation skills.
• Self-driven, organized, and capable of managing multiple assessment assignments.
• Willingness to travel for site assessments, customer meetings, audits, and workshops when required.

📌 IT / OT Cybersecurity Engineer - Compliance (Chennai)
🏢 Apeiron
📍 Chennai