EY - Cyber Security - OT Cybersecurity - Manager

Ernst & Young Advisory Services Sdn Bhd; Ernakulam; On-site; INR 2,400,000 - 4,200,000; Full time

Job summary

Ernst & Young Advisory Services Sdn Bhd is seeking a Manager level OT Cybersecurity expert to lead and deliver OT security engagements across critical industrial environments in the MENA region. You will perform risk assessments, architecture reviews, and OT monitoring implementations for SCADA, DCS, PLC, HMI, and ICs environments.

The role requires deep OT/ICS knowledge, hands-on use of Dragos and Nozomi platforms, and strong stakeholder management to drive practical risk-based solutions.

Qualifications

• Bachelor’s or Master’s degree in Cyber Security, Engineering (Electrical/Instrumentation/Industrial) or Information Technology.
• 10–15 years of experience in OT/ICS cybersecurity, with 5–7 years in OT/ICS,
• Hands-on experience with Dragos and/or Nozomi OT platforms.
• Experience with OT risk and maturity assessments.
• Experience working with Energy, Oil & Gas, Utilities, or Smart Infrastructure sectors.
• Willingness to travel across the MENA region.

Responsibilities

• Lead and deliver OT cybersecurity engagements across clients in the MENA region, including risk assessments and architecture reviews.
• Evaluate security posture across SCADA, DCS, PLC, HMI, and ICs environments; conduct OT-focused vulnerability assessments.
• Design, implement, and validate OT monitoring and detection capabilities; coordinate with engineering and operations teams.
• Develop OT cybersecurity roadmaps and transformation programs aligned to IEC 62443, NIST SP 800-82, and regional regulations.
• Engage with CISOs, Plant Managers, OT Engineers, and executives; deliver executive briefings and technical deep-dives.
• Contribute to OT cybersecurity practice development with methodologies, playbooks, and accelerators.

Skills

OT security

ICs/SCADA

Dragos

Nozomi

OT risk assessment

Industrial resilience

Education

Bachelor’s or Master’s degree in Cyber Security, Engineering or IT

Tools

Dragos

Nozomi

Job description

EY-Cyber Security-OT Cybersecurity-Manager

Other locations: Anywhere in Country

Date: Jul 22, 2026

Requisition ID: 1713280

EY - Manager – Cyber Security – OT Cybersecurity

Business Area: Technology Consulting – Cyber Security

Core Skills: OT Security, ICs/SCADA, Dragos, Nozomi, OT Risk Assessment, Industrial Cyber Resilience

The Opportunity

As part of our Cyber Technology Consulting practice, you will lead and deliver Operational Technology (OT) cybersecurity engagements across clients in the MENA region, particularly within Energy, Oil & Gas, Utilities, and Smart City ecosystems.

You will work with some of the region’s most critical infrastructure operators to assess, design, and enhance their OT security posture, ensuring resilience against evolving cyber threats targeting industrial environments.

Your Key Responsibilities

Client Delivery And Engagement Management

• Lead and deliver OT cybersecurity engagements, including:
• OT risk assessments and maturity assessments
• Architecture and network segmentation reviews
• Security posture evaluations across SCADA, DCS, PLC, HMI, and ICs environments
• Perform OT-focused vulnerability assessments and exposure analysis in coordination with engineering and operations teams.
• Implement and operationalize OT monitoring solutions including:
• Nozomi Networks Guardian / Vantage
• Design and validate OT detection and response capabilities, leveraging network traffic analysis, anomaly detection, and threat intelligence.
• Conduct industrial threat modeling and risk quantification aligned to operational impact, safety, and business continuity considerations.
• Develop OT cybersecurity roadmaps and transformation programs, aligned with frameworks such as:
• IEC 62443
• NIST SP 800-82
• NCA (KSA) / regional regulatory frameworks
• Support implementation of:
• Secure remote access for vendors and operators
• OT-specific incident response and crisis management playbooks

Sector-Specific Advisory

• Apply deep understanding of industrial processes and control systems across:
• Energy and Power Generation
• Utilities (Water, Electricity Distribution, Smart Grids)
• Smart Cities and Critical Infrastructure ecosystems
• Align OT security recommendations with operational priorities such as safety, availability, reliability, and regulatory compliance.
• Bridge the gap between engineering, operations, and IT/security teams, ensuring practical and implementable solutions.

Stakeholder Engagement And Advisory

• Act as a trusted advisor to CISOs, Plant Managers, OT Engineers, and Executive Leadership.
• Translate complex technical issues into business, safety, and operational risk impacts.
• Deliver executive-level briefings and technical deep-dives, tailored to diverse stakeholder groups.
• Facilitate workshops, tabletop exercises, and scenario-based discussions for OT cyber resilience.

Practice And Capability Development

• Contribute to the growth of the OT Cybersecurity practice, including:
• Development of methodologies, playbooks, and accelerators
• Standardization of OT assessment frameworks and delivery artifacts
• RFP/RFI responses
• Client presentations and solution articulation
• Thought leadership in OT cybersecurity and industrial resilience
• Stay current with:
• Emerging OT threats and attack campaigns
• ICS vulnerabilities and adversary tactics
• Evolving regulatory requirements across the MENA region

People Leadership And Team Development

• Lead, mentor, and develop a team of OT security consultants and specialists.
• Build cross-functional capability across OT, IT, and cyber domains.
• Drive a culture of technical excellence, safety awareness, and delivery quality.
• Provide structured feedback, coaching, and career development aligned to firm objectives.

Skills and Attributes for Success

• Strong understanding of OT/ICS cybersecurity principles, including security challenges unique to industrial environments.
• Hands‑on experience with OT security platforms, especially:
• Dragos
• Deep knowledge of:
• OT asset visibility, anomaly detection, and network monitoring
• Experience in installation, commissioning, FAT, and SAT of ICs systems like DCS, PLC, SCADA, and Network Devices in ICs Security related Projects.
• Proven capability in conducting OT risk assessments, including:
• Threat modeling
• Risk quantification
• Control gap analysis
• Strong understanding of industrial processes and operational workflows across Energy, Oil & Gas, Utilities, or Smart City environments.
• Familiarity with IT/OT convergence risks, segmentation strategies, and secure architecture design.
• Ability to communicate complex technical findings in a clear, business-impact context.
• Strong analytical, problem‑solving, and stakeholder management skills.
• Experience in managing large, multi-stream client engagements.

To Qualify for the Role, You Must Have:

• Bachelor’s or Master’s degree in Cyber Security, Engineering (Electrical/Instrumentation/Industrial), Information Technology, or related discipline.
• 10–15 years of experience, with at least 5–7 years in OT/ICS cybersecurity.
• Proven hands‑on experience with:
  • OT security assessments and architecture reviews
  • Deployment or use of Dragos and/or Nozomi platforms
  • OT risk and maturity assessments
• Experience working with clients in Energy, Oil & Gas, Utilities, or Smart Infrastructure sectors.
• Strong consulting, stakeholder management, and communication skills.
• Ability to manage multiple engagements and deliver high-quality outcomes.
• Willingness to travel across the MENA region, as required.

Ideally, You’ll Also Have

• Certifications such as:
• GICSP (Global Industrial Cyber Security Professional)
• ISA/IEC 62443 certifications
• SANS ICs (GRID, ICs410, ICs515)
• CISSP / CISM (added advantage)
• Experience in:
• OT incident response and forensic investigations
• Industrial SOC / OT SOC design and implementation
• Smart City cybersecurity architecture
• Integration of OT with enterprise security tools (SIEM, SOAR, XDR)
• Exposure to leading OT vendors such as:

What We Look For

• Have a growth mindset and bring a strong blend of OT domain knowledge and cybersecurity expertise
• Can operate effectively across engineering, operations, and cybersecurity stakeholders
• Demonstrate client-centricity, problem-solving, and solution-driven thinking
• Are passionate about securing critical infrastructure and industrial ecosystems
• Contribute to practice growth, innovation, and team development
• The ability to balance deep technical expertise with business acumen
• A collaborative approach to problem-solving and innovation
• A commitment to quality, integrity, and continuous improvement