AISB-964 Cybersecurity Risk Analyst

Abakus IT-Solutions; Namen; Sur place; EUR 65 000 - 90 000; Plein temps

Résumé du poste

ABAKUS IT SOLUTIONS is seeking an experienced Cybersecurity Risk Analyst focused on OT/ICS to strengthen governance around critical industrial infrastructures. You will identify, assess, and mitigate cyber risks affecting operations, collaborating with multidisciplinary teams to improve resilience, security, and continuity.

Responsibilities include risk assessments for industrial control systems, maintaining OT asset inventories, and translating risks into SOC monitoring requirements.

Qualifications

• Proven experience as a Cybersecurity Risk Analyst or similar governance role.
• Strong knowledge of OT/ICS concepts including SCADA, PLC, RTU, DCS.
• Familiarity with industrial protocols such as Modbus, PROFINET, DNP3.
• Experience with cybersecurity frameworks (NIST Cybersecurity Framework, CyberFundamentals).
• Knowledge of risk assessment methodologies (ISO 27005, IEC 62443-3-2, EBIOS Risk Manager).
• Familiarity with IEC 62443 standards and cybersecurity reporting tools.

Responsabilités

• Conduct cyber risk assessments for OT/ICS environments and IT dependencies.
• Build and maintain an OT asset inventory (PLCs, RTUs, HMIs, field networks).
• Identify dependencies and single points of failure across OT/IT.
• Develop risk treatment plans including mitigation, transfer, or acceptance.
• Translate OT risks into monitoring, logging, and SOC requirements.
• Contribute to BCP and DRP planning and disaster recovery exercises.

Connaissances

Analytical

Communication

Autonomous

Proactive

Rigorous

Solution-oriented

Outils

GRC tools

Description du poste

ABAKUS IT SOLUTIONS is looking for an experienced Cybersecurity Risk Analyst with a strong focus on Operational Technology (OT) and Industrial Control Systems (ICS). In this role, you will contribute to the cybersecurity governance of critical industrial infrastructures by identifying, assessing, and mitigating cyber risks affecting operational environments. You will collaborate with multidisciplinary teams to improve the resilience, security, and continuity of essential services while ensuring alignment with industry standards and best practices.

Your Responsibilities

• Conduct cyber risk assessments for industrial control systems and their IT dependencies.
• Build and maintain an inventory of OT assets, including PLCs, RTUs, HMIs, field networks, and supporting IT infrastructure.
• Identify critical dependencies and Single Points of Failure (SPOF) across OT and IT environments.
• Perform operational risk analyses by evaluating threats, vulnerabilities, business impacts, and attack scenarios.
• Develop risk treatment plans including mitigation, avoidance, transfer, or acceptance strategies.
• Define prioritized roadmaps to reduce cyber risks while ensuring operational continuity.
• Support the integration of cybersecurity requirements into technical projects and procurement processes.
• Assess the cybersecurity posture of critical OT suppliers and maintenance providers.
• Translate OT risks into monitoring, logging, and detection requirements for Security Operations Center (SOC) teams.
• Participate in disaster recovery exercises, restoration tests, and tabletop simulations.
• Contribute to Business Continuity Plans (BCP) and Disaster Recovery Plans (DRP).
• Maintain the OT risk register and prepare executive reports for governance committees and cybersecurity audits.
• Communicate complex cybersecurity risks clearly to both technical teams and business stakeholders.

Required Qualifications

• Proven experience as a Cybersecurity Risk Analyst or similar cybersecurity governance role.
• Strong knowledge of industrial control systems, including:
  • SCADA
  • PLC
  • RTU
  • DCS
• Good understanding of industrial communication protocols such as:
  • Modbus
  • PROFINET
  • DNP3
  • or equivalent protocols.
• Experience with cybersecurity frameworks such as:
  • NIST Cybersecurity Framework
  • CyberFundamentals
• Knowledge of risk assessment methodologies including:
  • ISO 27005
  • IEC 62443-3-2
  • EBIOS Risk Manager
• Familiarity with IEC 62443 standards.
• Experience working with GRC tools and cybersecurity reporting.
• Excellent analytical and documentation skills.
• Strong communication skills with the ability to explain technical concepts to both technical and non-technical audiences.
• Autonomous, proactive, rigorous, and solution-oriented mindset.
• French proficiency (C2 level).
• Basic English communication skills.

Why Join ABAKUS IT SOLUTIONS?

• Long-term mission with excellent project stability.
• Exposure to complex OT/ICS cybersecurity environments.
• Collaboration with experienced cybersecurity professionals.
• Opportunities to expand your expertise in industrial cybersecurity, governance, and risk management.
• A supportive culture where innovation, knowledge sharing, and continuous learning are encouraged.

If you are passionate about OT cybersecurity, risk management, and protecting critical infrastructure, we'd love to hear from you.