OT Cyber Risk Specialist III

This is a fully remote position, open to applicants in United States.

📋 Description

• Perform cybersecurity risk assessments within manufacturing operational technology (OT) environments, including production facilities and plant-floor systems.

• Identify, assess, prioritize, and document cyber risks that affect manufacturing operations.

• Create and maintain the OT risk register while tracking remediation efforts.

• Evaluate risks related to manufacturing equipment, industrial automation, robotics, PLCs, HMIs, and MES.

• Collaborate with manufacturing engineering, maintenance, plant operations, and IT teams to mitigate risks while minimizing production downtime.

• Examine new manufacturing technologies, automation projects, and capital initiatives to integrate cybersecurity requirements into their design and deployment.

• Assist in identifying and inventorying OT assets, considering their criticality and business impact.

• Assess risks linked to third-party vendors, OEMs, and remote maintenance access.

• Aid in vulnerability assessments and remediation planning for manufacturing OT assets.

• Keep an eye on emerging cyber threats aimed at manufacturing organizations and suggest defensive strategies.

• Participate in OT cybersecurity incident response, conduct root cause analysis, and implement post-incident corrective measures.

• Support disaster recovery and business continuity planning efforts.

• Develop and maintain OT cybersecurity controls, policies, standards, and procedures.

• Generate risk and performance metrics that communicate the OT cybersecurity posture and remediation progress.

• Assist with internal audits, customer assessments, and manufacturing cybersecurity compliance initiatives.

• Contribute to risk management programs, processes, and strategic initiatives.

• Help with risk assessments for third-party vendors, cloud platforms, and business applications as necessary.

⛳️ Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Engineering, Computer Science, or a related discipline.

• Over 5 years of experience in cybersecurity.

• A minimum of 3 years supporting manufacturing operational technology (OT) environments.

• Proven experience in conducting cyber risk assessments and facilitating remediation actions.

• Strong comprehension of manufacturing networks, industrial automation, and production systems.

• Familiarity with cybersecurity governance, risk management, and security controls.

• Experience in collaborating with plant operations, engineering, maintenance, and IT teams.

• Exceptional analytical, communication, and project management abilities.

• Preferred: Experience in supporting smart manufacturing, Industry 4.0, and connected factory initiatives.

• Preferred working knowledge of IEC 62443, NIST Cybersecurity Framework (CSF), NIST SP 800-82, and ISA/IEC industrial cybersecurity standards.

• Preferred experience with OT security platforms, such as Microsoft Defender for IoT, Nozomi Networks, Claroty, Dragos, and Tenable.ot.

• Preferred familiarity with PLCs, SCADA, HMIs, Distributed Control Systems (DCS), Manufacturing Execution Systems (MES), Industrial Ethernet, OPC UA, Modbus, Profinet, and EtherNet/IP.

• Preferred certifications include GICSP, CISSP, CISM, CRISC, or GRID.

🏝️ Benefits

• Short-term incentive based on performance.

• Medical insurance coverage.

• Dental insurance coverage.

• Vision insurance coverage.

• Paid time off accruing at a rate of 3.07 hours during the first year of employment.

• 4 weeks of paid parental leave.

• 11 company-paid holidays in 2027 (9 fixed holidays and 2 optional floating holidays), subject to annual changes.

• 401(k) retirement savings plan.

• Employee stock purchase plan.