Industrial Cyber Risk & Continuity Analyst

Keystone Solutions; Namen; Sur place; EUR 70 000 - 110 000; Plein temps

Résumé du poste

Keystone Solutions is seeking a consultant to evaluate, prioritize, and track cyber risks related to industrial systems and their IT dependencies present on public infrastructures managed by our client. This on-site assignment requires representing Keystone Solutions while addressing diverse challenges in a dynamic environment.

The role emphasizes rigorous risk assessment, CMDB mapping, and creation of a risk reduction roadmap, with a focus on OT/IT convergence, SOC integration, and disaster

Qualifications

• English language at beginner level (A1) mandatory; French at professional proficiency (C2) required.

Responsabilités

• Map OT assets and IT dependencies in a unified CMDB; identify SPOFs such as Domain Controller and critical links.
• Perform operational risk analysis using SPW methodology to model threats and impacts.
• Develop a prioritised treatment plan with a 24-month roadmap and cost/impact estimates.
• Draft IT/OT security clauses in specifications and verify critical OT suppliers' compliance.
• Translate OT risks into logging requirements and detection rules for the SPW SOC.
• Participate in restoration tests and tabletop exercises for continuity planning (PCA/DRP).
• Maintain OT risk register and provide summaries for Cyber MI Committee and NIS2 audits.

Connaissances

Communication & influence

Industrial protocol knowledge

SCADA/PLC/RTU/DCS knowledge

Cybersecurity frameworks

Risk management methodologies

IEC 62443 familiarity

GRC tools

Outils

GRC tools

Description du poste

Keystone Solutions is seeking a consultant to evaluate, prioritize, and track cyber risks related to industrial systems and their IT dependencies present on public infrastructures managed by our client. This on-site assignment requires representing Keystone Solutions while addressing diverse challenges in a dynamic environment.

The role emphasizes rigorous risk assessment, CMDB mapping, and creation of a risk reduction roadmap, with a focus on OT/IT convergence, SOC integration, and disaster