10 Nov
|
Ernst & Young
|
Kochi
10 Nov
Ernst & Young
Kochi
At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.EY - Manager – Cyber Security – OT Cybersecurity Core Skills: OT Security, ICS/SCADA, Dragos, Nozomi, OT Risk Assessment, Industrial Cyber ResilienceThe OpportunityAs part of our Cyber Technology Consulting practice, you will lead and deliver Operational Technology (OT) cybersecurity engagements across clients in the MENA region, particularly within Energy, Oil & Gas, Utilities, and Smart City ecosystems.You will work with some of the region’s most critical infrastructure operators to assess, design, and enhance their OT security posture, ensuring resilience against evolving cyber threats targeting industrial environments. The role provides the opportunity to operate at the intersection of industrial operations, cybersecurity, and digital transformation, while contributing to the growth of our OT Security competencyYour Key ResponsibilitiesClient Delivery & Engagement ManagementLead and deliver OT cybersecurity engagements, including:OT risk assessments and maturity assessmentsArchitecture and network segmentation reviewsSecurity posture evaluations across SCADA, DCS, PLC, HMI, and ICS environmentsPerform OT-focused vulnerability assessments and exposure analysis in coordination with engineering and operations teams.Implement and operationalize OT monitoring solutions including:Dragos PlatformNozomi Networks Guardian / VantageDesign and validate OT detection and response capabilities, leveraging network traffic analysis, anomaly detection, and threat intelligence.Conduct industrial threat modeling and risk quantification aligned to operational impact, safety, and business continuity considerations.Develop OT cybersecurity roadmaps and transformation programs, aligned with frameworks such as:IEC 62443NIST SP 800-82NCA (KSA) / regional regulatory frameworksSupport implementation of:OT network segmentation (zones & conduits)Secure remote access for vendors and operatorsOT-specific incident response and crisis management playbooksSector-Specific AdvisoryApply deep understanding of industrial processes and control systems across:Energy and Power GenerationOil & Gas (Upstream, Midstream, Downstream)Utilities (Water, Electricity Distribution, Smart Grids)Smart Cities and Critical Infrastructure ecosystemsAlign OT security recommendations with operational priorities such as safety, availability, reliability,
and regulatory compliance.Bridge the gap between engineering, operations, and IT/security teams, ensuring practical and implementable solutions.Stakeholder Engagement & AdvisoryAct as a trusted advisor to CISOs, Plant Managers, OT Engineers, and Executive Leadership.Translate complex technical issues into business, safety, and operational risk impacts.Deliver executive-level briefings and technical deep-dives, tailored to diverse stakeholder groups.Facilitate workshops, tabletop exercises, and scenario-based discussions for OT cyber resilience.Practice & Capability DevelopmentContribute to the growth of the OT Cybersecurity practice, including:Development of methodologies, playbooks, and acceleratorsStandardization of OT assessment frameworks and delivery artifactsSupport business development activities, including:RFP/RFI responsesClient presentations and solution articulationThought leadership in OT cybersecurity and industrial resilienceStay current with:Emerging OT threats and attack campaignsICS vulnerabilities and adversary tacticsEvolving regulatory requirements across the MENA regionPeople Leadership & Team DevelopmentLead, mentor, and develop a team of OT security consultants and specialists.Build cross-functional capability across OT, IT, and cyber domains.Drive a culture of technical excellence, safety awareness, and delivery quality.Provide structured feedback, coaching, and career development aligned to firm objectives.Skills and Attributes for SuccessStrong understanding of OT/ICS cybersecurity principles, including security challenges unique to industrial environments.Hands-on experience with OT security platforms, especially:DragosNozomi NetworksDeep knowledge of:Industrial communication protocols (Modbus, DNP3, OPC-UA, PROFINET, IEC 61850)OT asset visibility, anomaly detection, and network monitoringExperience in installation, commissioning, FAT, and SAT of ICS systems like DCS, PLC, SCADA, and Network Devices in ICS Security related Projects.Proven capability in conducting OT risk assessments, including:Threat modelingRisk quantificationControl gap analysisStrong understanding of industrial processes and operational workflows across Energy, Oil & Gas, Utilities, or Smart City environments.Familiarity with IT/OT convergence risks,
segmentation strategies, and secure architecture design.Ability to communicate complex technical findings in a clear, business-impact context.Strong analytical, problem-solving, and stakeholder management skills.Experience in managing large, multi-stream client engagements.To Qualify for the Role, You Must Have:Bachelor’s or Master’s degree in Cyber Security, Engineering (Electrical/Instrumentation/Industrial), Information Technology, or related discipline.10–15 years of experience, with at least 5–7 years in OT/ICS cybersecurity.Proven hands-on experience with:OT security assessments and architecture reviewsDeployment or use of Dragos and/or Nozomi platformsOT risk and maturity assessmentsExperience working with clients in Energy, Oil & Gas, Utilities, or Smart Infrastructure sectors.Strong consulting, stakeholder management, and communication skills.Ability to manage multiple engagements and deliver high-quality outcomes.Willingness to travel across the MENA region, as required.Ideally, You’ll Also HaveCertifications such as:GICSP (Global Industrial Cyber Security Professional)ISA/IEC 62443 certificationsSANS ICS (GRID, ICS410, ICS515)CISSP / CISM (added advantage)Experience in:OT incident response and forensic investigationsIndustrial SOC / OT SOC design and implementationSmart City cybersecurity architectureIntegration of OT with enterprise security tools (SIEM, SOAR, XDR)Exposure to leading OT vendors such as:Claroty, Dragos, Nozomi, Tenable.Ot, Forescout etc.What We Look ForWe seek individuals who:Have a growth mindset and bring a solid blend of OT domain knowledge and cybersecurity expertiseCan operate effectively across engineering, operations, and cybersecurity stakeholdersDemonstrate client-centricity, problem-solving, and solution-driven thinkingAre passionate about securing critical infrastructure and industrial ecosystemsContribute to practice growth, innovation, and team developmentThe ability to balance deep technical expertise with business acumenA collaborative approach to problem-solving and innovationA commitment to quality, integrity, and continuous improvementEY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.
📌 Ey- Cyber Security - Ot Cybersecurity- Manager (Kochi)
🏢 Ernst & Young
📍 Kochi