Cyber - Operational Technology - Senior - Consulting

EY; Des Moines (IA); On-site; USD 110,000 - 190,000; Full time

Job summary

EY is seeking an OT Cybersecurity Senior or Senior Consultant within Technology Consulting to deliver defined workstreams across OT security assessments, architecture, strategy and implementation with clients in industrial sectors.

You will collaborate with engineering, operations and cybersecurity teams, produce technical and executive deliverables, and help strengthen resilience of industrial environments while staying current on ISA/IEC 62443, NIST CSF guidance and related standards.

Qualifications

• Bachelor's degree in Cybersecurity, CS, IT, Engineering, or related field, or equivalent experience.
• 3+ years in cybersecurity, OT security, or industrial automation.
• Experience with OT cybersecurity assessments and architecture reviews.
• Familiarity with OT environments: SCADA, DCS, PLC, HMI.
• Willingness to travel as needed.

Responsibilities

• Lead OT cybersecurity assessments and risk analyses across client environments.
• Review OT networks, segmentation, firewalls, and secure remote access.
• Develop OT security strategies, roadmaps, and implementation plans.
• Prepare client deliverables, architecture diagrams, and executive briefings.
• Mentor junior team members and contribute to proposals.
• Stay current on OT threats and regulatory guidance.

Skills

OT cybersecurity

Industrial networks

Analytical skills

Cross-functional teamwork

Education

BS in Cybersecurity

Tools

ISA/IEC 62443

NIST SP 800-82

NIST CSF

Job description

Location: Anywhere in Country

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

The opportunity

Industrial and critical infrastructure organizations are strengthening cybersecurity as Operational Technology environments become more connected and exposed to changing threats. They need professionals who can understand industrial systems, work across engineering and cybersecurity teams, and turn technical analysis into practical improvements.

As an OT Cybersecurity Senior or Senior Consultant in Technology Consulting, you will deliver and lead defined workstreams across OT security assessments, architecture, strategy and implementation initiatives. You will work directly with clients, prepare high-quality technical and executive deliverables, and help improve the security and resilience of industrial environments.

Your Key Responsibilities

• Conduct OT cybersecurity maturity assessments, risk assessments, gap analyses, security audits, architecture reviews and vulnerability assessments.
• Assess industrial environments that may include ICS, SCADA, DCS, PLC, RTU, HMI, SIS and IIoT technologies, industrial networks and supporting infrastructure.
• Review OT network architectures, segmentation approaches, zones and conduits, firewall rules, secure remote access, system hardening, asset visibility and monitoring capabilities.
• Support the development of OT cybersecurity strategies, roadmaps, policies, standards, procedures, reference architectures and implementation plans.
• Design and support implementation of OT security solutions while considering safety, availability, reliability and operational constraints.
• Apply frameworks and standards such as ISA/IEC 62443, NIST SP 800-82 and NIST CSF. Apply sector-specific guidance when relevant.
• Participate in and facilitate client interviews, workshops and technical discussions with engineering, operations, maintenance, IT and cybersecurity stakeholders.
• Prepare clear client deliverables, technical documentation, architecture diagrams, executive presentations and prioritized recommendations.
• Lead defined workstreams and support project planning, status reporting, risk and issue tracking, resource planning and budget monitoring.
• Collaborate with engagement leadership and multidisciplinary teams. Guide and mentor junior team members where appropriate.
• Contribute to proposals, client presentations, reusable assets, thought leadership and identification of additional client needs.
• Stay current on OT threats, vulnerabilities, industrial attack techniques, technologies and regulatory developments.

Skills And Attributes For Success

• Strong understanding of OT and ICS cybersecurity principles, industrial control environments and the operational impact of security decisions.
• Working knowledge of industrial network architectures, common protocols and controls such as segmentation, firewalls, IDS or IPS, allowlisting, monitoring and secure remote access.
• Ability to analyze technical information and develop practical recommendations for technical and nontechnical audiences.
• Strong written and verbal communication, stakeholder management, analytical and problem‑solving skills.
• Ability to manage competing priorities and deliver high‑quality work in a collaborative consulting environment.
• Ability to work with cross‑functional teams spanning engineering, operations, IT and cybersecurity.

To qualify for the role, you must have

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Industrial Automation or a related field, or equivalent relevant experience.
• Approximately 3 or more years of relevant cybersecurity, OT security, industrial automation or related experience. HR should calibrate the final threshold to the approved U.S. rank and compensation structure.
• Experience performing or supporting OT cybersecurity assessments, architecture reviews, risk analysis, security design or implementation activities.
• Knowledge of OT and ICS environments and systems such as SCADA, DCS, PLC, RTU or HMI.
• Familiarity with ISA/IEC 62443, NIST SP 800-82, NIST CSF or comparable cybersecurity guidance.
• Experience producing professional reports, presentations, technical documentation or architecture artifacts.
• Ability and willingness to travel based on client and project needs.

Ideally, you'll also have

• Hands‑on experience with OT monitoring, asset visibility or threat detection platforms such as Nozomi Networks, Claroty, Dragos, Armis, Microsoft Defender for IoT, Cisco Cyber Vision or comparable technologies.
• Experience in power and utilities, oil and gas, manufacturing, chemicals, mining, transportation, water or other critical infrastructure sectors.
• Experience with industrial protocols such as Modbus, DNP3, OPC, OPC UA, EtherNet/IP, CIP, PROFINET or IEC 61850.
• Experience with OT incident response, vulnerability management, security testing, threat modeling or transition‑to‑operations activities.
• Relevant certifications such as GICSP, ISA/IEC 62443, GRID, CISSP, CISM, CISA, Security+, CCNA or comparable credentials.

What We Look For

We are looking for professionals who combine OT and ICS technical credibility with practical consulting judgment. Successful candidates communicate clearly, collaborate across engineering, operations and cybersecurity teams, and deliver high‑quality outcomes in complex industrial environments.

What We Offer You

At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers.

• The salary range for this job is:
• New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $125,800 to $209,700
• Bay Area California offices – $131,100 to $218,500
• All other offices locations in the US, including Sacramento – $104,800 to $192,200
• Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi‑disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

All in to shape the future with confidence.

EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.

EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY’s Talent Shared Services Team (TSS) or email the TSS at [e-mail].