Business Analyst - Cybersecurity

Persistent Systems; Selangor; On-site; MYR 40,000 - 80,000; Full time

Job summary

Ein etabliertes Unternehmen sucht einen Security Consultant / Business Analyst, der die Planung und Ausführung von OT-Sicherheitsprojekten unterstützt. In dieser Rolle arbeiten Sie eng mit verschiedenen Stakeholdern zusammen, führen Anbieterbewertungen durch und stellen sicher, dass alle Projekte den relevanten Sicherheitsstandards entsprechen. Sie bringen Ihre Erfahrung in der IT-Sicherheit und Ihr Wissen über OT-Standards ein, um kontinuierliche Verbesserungen zu fördern und die Projektziele zu erreichen. Diese Position bietet Ihnen die Möglichkeit, in einem dynamischen Umfeld zu arbeiten und Ihre Fähigkeiten in einem internationalen Kontext einzusetzen.

Qualifications

• 3-5 Jahre Erfahrung in der IT-Sicherheit, bevorzugt mit OT-Umgebungen.
• Relevante Zertifizierungen wie CISSP oder CISM sind von Vorteil.

Responsibilities

• Unterstützung bei der Planung und Ausführung von OT-Sicherheitsprojekten.
• Durchführung von Anbieterbewertungen für Proof of Concepts (PoCs).
• Identifikation und Minderung von Risiken im Zusammenhang mit OT-Sicherheit.

Skills

Projektmanagement

Kommunikationsfähigkeiten

Risikobewertung

Incident Response

Change Management

Education

Abschluss in IT oder Cybersecurity

Tools

ISO 27001

NIST Cybersecurity Framework

ISA/IEC 62443

Job description

The Security Consultant / Business Analyst will support the planning, execution, and monitoring of OT (operational technology systems and networks) security projects, ensuring they meet deadlines, budgets, and objectives. This role involves collaboration with various stakeholders, vendor evaluation and end-to-end execution of Proof of Concepts (PoCs) related to IT/OT demarcation, compliance with security standards, and continuous improvement initiatives.

Responsibilities:

• Project Support: Assist in the planning, execution, and monitoring of OT security projects.
• Vendor Evaluation: Conduct vendor evaluations for Proof of Concepts (PoCs) related to IT/OT demarcation.
• Risk Management: Identify, assess, and mitigate risks related to OT security.
• Compliance: Ensure projects adhere to relevant security standards and regulations (e.g., ISO 27001, NIST Cybersecurity Framework), and internal secure architecture design principles and requirements.
• Documentation: Assist in the creation and maintenance of comprehensive project documentation.
• Stakeholder Management: Engage, communicate, and collaborate with IT teams, plant managers, and external vendors.
• Continuous Improvement: Identify areas of opportunity and support the implementation of product enhancements with the corresponding teams.

Requirements:

• Educational Background: A degree in IT, cybersecurity, or a related field.
• Experience: 3-5 years of relevant experience in IT security, with hands-on experience in OT environments and project management preferred.
• Certifications: Relevant certifications such as CISSP, CISM, or ISO 27001 are a plus.
• Skills: Good project management skills, strong communication abilities, and proficiency in risk assessment and incident response.
• Knowledge: Familiarity with OT security standards and frameworks (e.g., ISA/IEC 62443).
• Cultural Adaptability: Experience in managing or supporting global projects and understanding the impact of organizational culture on business process changes.
• Team Collaboration: Ability to work effectively in a team environment and support project goals.
• Change Management: Basic skills in change management, including the ability to support and implement change initiatives effectively.