Cyber - Operational Technology - Senior Manager - Consulting

FlagshipKansas; Topeka, Northern (KS, KY); Hybrid; USD 171,000 - 444,000; Full time

Job summary

EY is seeking an OT Cybersecurity Senior Manager in Technology Consulting to lead engagements that assess, design, and improve cybersecurity for OT and ICS environments across industrial sectors.

You will mentor teams, develop risk-based roadmaps, and apply ISA/IEC 62443 and NIST SP 800-82 guidance while partnering with clients to protect safety, availability and reliability of critical operations.

Qualifications

• Bachelor’s degree or equivalent experience in a related field.
• 8+ years in cybersecurity, OT security, or industrial automation.
• Experience leading OT security assessments and improvement programs.

Responsibilities

• Lead OT cybersecurity engagements, including maturity and risk assessments, architecture reviews, vulnerability assessments, security strategy, roadmaps and implementation support.
• Assess industrial environments with ICS, SCADA, DCS, PLCs, RTU, HMI, SIS and IIoT technologies.
• Design and implement practical OT security controls: segmentation, defense in depth, hardening, secure remote access, asset visibility, monitoring and incident response.

Skills

OT cybersecurity

Leadership

Project management

Communication

Risk assessment

Education

Bachelor's degree in Cybersecurity or related field

Tools

ISA/IEC 62443

NIST SP 800-82

Job description

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

The opportunity

Organizations are connecting industrial operations, modernizing control environments and integrating OT with enterprise technology. These changes create new cybersecurity, resilience and regulatory challenges across critical infrastructure and industrial sectors.

As an OT Cybersecurity Senior Manager in Technology Consulting, you will lead client engagements that assess, design and improve cybersecurity for Operational Technology and Industrial Control System environments. You will combine practical OT security knowledge with engagement leadership, client advisory, team development and business development. You will work across engineering, operations, cybersecurity and technology teams to help clients protect critical operations while supporting safety, availability and reliability.

Your key responsibilities

• Lead OT cybersecurity engagements, including maturity and risk assessments, architecture and configuration reviews, vulnerability assessments, security strategy, transformation roadmaps and implementation support.
• Assess industrial environments that may include ICS , SCADA , DCS , PLC , RTU , HMI , SIS and IIoT technologies, industrial networks and supporting infrastructure.
• Guide the design and implementation of practical OT security controls, including network segmentation, zones and conduits, defense in depth, system hardening, secure remote access, asset visibility, security monitoring and incident response capabilities.
• Apply recognized OT cybersecurity frameworks and standards, including ISA / IEC 62443 and NIST SP 800-82. Apply NIST CSF and sector-specific requirements when relevant to the client environment.
• Lead client workshops and technical discussions with operational, engineering, cybersecurity and executive stakeholders. Translate technical findings into clear operational and business risk implications.
• Manage engagement scope, workplans, resources, risks, quality, timelines and budgets. Keep client and EY stakeholders informed of progress and expected outcomes.
• Lead, coach and develop engagement team members. Review deliverables and promote a collaborative, quality-focused and safety-aware working environment.
• Build trusted client relationships and identify opportunities where EY can provide additional value.
• Support business development through proposals, client presentations, solution shaping, methodology development, thought leadership and reusable assets.
• Stay current on OT threat activity, industrial vulnerabilities, evolving regulations, security technologies and leading practices.

Skills and attributes for success

• Deep understanding of OT and ICS cybersecurity principles and the operational priorities that distinguish industrial environments from enterprise IT.
• Ability to lead complex client engagements and communicate with plant, engineering, security and executive stakeholders.
• Working knowledge of industrial network architectures, industrial protocols and security controls used in OT environments.
• Ability to turn technical observations into practical, prioritized recommendations that consider safety, availability, reliability and business continuity.
• Strong project management, analytical, problem-solving, facilitation, written communication and presentation skills.
• Ability to work effectively with multidisciplinary and geographically distributed teams.

To qualify for the role, you must have

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, Industrial Automation or a related field, or equivalent relevant experience.
• Approximately 8+ or more years of relevant cybersecurity, OT security, industrial automation or related experience.
• Experience leading or managing OT cybersecurity assessments, architecture reviews, security improvement programs or implementation initiatives.
• Practical knowledge of OT and ICS environments, industrial networking and systems such as SCADA , DCS , PLC , RTU or HMI .
• Experience applying ISA / IEC 62443, NIST SP 800-82 or comparable OT cybersecurity guidance.
• Experience developing high-quality client reports, presentations, roadmaps, security designs, policies, standards or implementation documentation.
• Experience leading teams, managing client expectations and delivering work within agreed timelines and budgets.
• Ability and willingness to travel based on client and project needs.

Ideally, you’ll also have

• Hands-on experience with OT monitoring, asset visibility or threat detection platforms such as Nozomi Networks, Claroty, Dragos, Armis, Microsoft Defender for IoT, Cisco Cyber Vision or comparable technologies.
• Experience in one or more industrial sectors such as power and utilities, oil and gas, manufacturing, chemicals, mining, transportation, water or other critical infrastructure.
• Experience with OT incident response, cyber resilience, threat modeling, security testing or vulnerability management in industrial environments.
• Relevant certifications such as GICSP , ISA / IEC 62443, GRID , CISSP , CISM , CISA , CCNA or comparable credentials.
• Experience supporting pursuits, proposals, account development, methodology development or practice-building activities.

What we look for

We are looking for professionals who combine OT and ICS technical credibility with practical consulting judgment. Successful candidates communicate clearly, collaborate across engineering, operations and cybersecurity teams, and deliver high-quality outcomes in complex industrial environments.

What we offer you

At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers .

The salary range for this job is:

• New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $204,800 to $425,500
• Bay Area California offices – $213,300 to $443,200
• All other offices locations in the US, including Sacramento – $170,600 to $390,000
• Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, mu