Cyber - Operational Technology - Senior - Consulting

EY; Toledo (OH); On-site; USD 105,000 - 219,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Job summary

EY is seeking an OT Cybersecurity Senior or Senior Consultant to deliver and lead workstreams across OT security assessments, architecture, strategy and implementation initiatives. You will prepare technical and executive deliverables, engage with clients, and help improve security and resilience of industrial environments.

The role requires collaboration with engineering, operations, IT and cybersecurity stakeholders, travel as needed, and staying current on OT threats, regulations and industry

Qualifications

• Bachelor's degree or equivalent experience in cybersecurity/engineering fields.
• 3+ years of cybersecurity/OT security experience in industrial environments.
• Experience with OT cybersecurity assessments and architecture reviews.
• Knowledge of OT/ICS environments (SCADA, DCS, PLC, RTU, HMI).
• Familiarity with ISA/IEC 62443, NIST SP 800-82, NIST CSF.

Responsibilities

• Conduct OT cybersecurity maturity assessments, risk analyses and vulnerability assessments.
• Review OT network architectures, segmentation, firewalls and secure remote access.
• Develop OT cybersecurity strategies, roadmaps, and implementation plans.
• Lead defined workstreams, project planning, and client deliverables.

Skills

OT cybersecurity

ICS networks

Risk assessment

Executive communication

Project leadership

Travel flexibility

Education

Bachelor's degree in Cybersecurity or related field

Tools

ISA/IEC 62443

NIST SP 800-82

NIST CSF

Job description

Location: Anywhere in Country

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

The opportunity

Industrial and critical infrastructure organizations are strengthening cybersecurity as Operational Technology environments become more connected and exposed to changing threats. They need professionals who can understand industrial systems, work across engineering and cybersecurity teams, and turn technical analysis into practical improvements.

As an OT Cybersecurity Senior or Senior Consultant in Technology Consulting, you will deliver and lead defined workstreams across OT security assessments, architecture, strategy and implementation initiatives. You will work directly with clients, prepare high-quality technical and executive deliverables, and help improve the security and resilience of industrial environments.

Your Key Responsibilities

• Conduct OT cybersecurity maturity assessments, risk assessments, gap analyses, security audits, architecture reviews and vulnerability assessments.
• Assess industrial environments that may include ICS, SCADA, DCS, PLC, RTU, HMI, SIS and IIoT technologies, industrial networks and supporting infrastructure.
• Review OT network architectures, segmentation approaches, zones and conduits, firewall rules, secure remote access, system hardening, asset visibility and monitoring capabilities.
• Support the development of OT cybersecurity strategies, roadmaps, policies, standards, procedures, reference architectures and implementation plans.
• Design and support implementation of OT security solutions while considering safety, availability, reliability and operational constraints.
• Apply frameworks and standards such as ISA/IEC 62443, NIST SP 800-82 and NIST CSF. Apply sector-specific guidance when relevant.
• Participate in and facilitate client interviews, workshops and technical discussions with engineering, operations, maintenance, IT and cybersecurity stakeholders.
• Prepare clear client deliverables, technical documentation, architecture diagrams, executive presentations and prioritized recommendations.
• Lead defined workstreams and support project planning, status reporting, risk and issue tracking, resource planning and budget monitoring.
• Collaborate with engagement leadership and multidisciplinary teams. Guide and mentor junior team members where appropriate.
• Contribute to proposals, client presentations, reusable assets, thought leadership and identification of additional client needs.
• Stay current on OT threats, vulnerabilities, industrial attack techniques, technologies and regulatory developments.

Skills And Attributes For Success

• Strong understanding of OT and ICS cybersecurity principles, industrial control environments and the operational impact of security decisions.
• Working knowledge of industrial network architectures, common protocols and controls such as segmentation, firewalls, IDS or IPS, allowlisting, monitoring and secure remote access.
• Ability to analyze technical information and develop practical recommendations for technical and nontechnical audiences.
• Strong written and verbal communication, stakeholder management, analytical and problem‑solving skills.
• Ability to manage competing priorities and deliver high‑quality work in a collaborative consulting environment.
• Ability to work with cross‑functional teams spanning engineering, operations, IT and cybersecurity.

To qualify for the role, you must have

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Industrial Automation or a related field, or equivalent relevant experience.
• Approximately 3 or more years of relevant cybersecurity, OT security, industrial automation or related experience. HR should calibrate the final threshold to the approved U.S. rank and compensation structure.
• Experience performing or supporting OT cybersecurity assessments, architecture reviews, risk analysis, security design or implementation activities.
• Knowledge of OT and ICS environments and systems such as SCADA, DCS, PLC, RTU or HMI.
• Familiarity with ISA/IEC 62443, NIST SP 800-82, NIST CSF or comparable cybersecurity guidance.
• Experience producing professional reports, presentations, technical documentation or architecture artifacts.
• Ability and willingness to travel based on client and project needs.

Ideally, you'll also have

• Hands‑on experience with OT monitoring, asset visibility or threat detection platforms such as Nozomi Networks, Claroty, Dragos, Armis, Microsoft Defender for IoT, Cisco Cyber Vision or comparable technologies.
• Experience in power and utilities, oil and gas, manufacturing, chemicals, mining, transportation, water or other critical infrastructure sectors.
• Experience with industrial protocols such as Modbus, DNP3, OPC, OPC UA, EtherNet/IP, CIP, PROFINET or IEC 61850.
• Experience with OT incident response, vulnerability management, security testing, threat modeling or transition‑to‑operations activities.
• Relevant certifications such as GICSP, ISA/IEC 62443, GRID, CISSP, CISM, CISA, Security+, CCNA or comparable credentials.

What We Look For

We are looking for professionals who combine OT and ICS technical credibility with practical consulting judgment. Successful candidates communicate clearly, collaborate across engineering, operations and cybersecurity teams, and deliver high‑quality outcomes in complex industrial environments.

What We Offer You

At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers.

• The salary range for this job is:
• New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $125,800 to $209,700
• Bay Area California offices – $131,100 to $218,500
• All other offices locations in the US, including Sacramento – $104,800 to $192,200
• Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi‑disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

All in to shape the future with confidence.

EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.

EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY’s Talent Shared Services Team (TSS) or email the TSS at [e-mail].