Senior OT Cybersecurity Consultant (Industrial Control)

EY; Pittsburgh (Allegheny County); On-site; USD 125,000 - 210,000; Full time

Job summary

EY is seeking an OT cybersecurity consultant to advance industrial control system security across diverse clients in the U.S. You will perform risk assessments, architecture reviews and strategy development while collaborating with engineering, operations and IT teams.

The role requires strong communication skills, the ability to translate technical findings for nontechnical audiences, and willingness to travel for client engagements.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Industrial Automation or a related field.
• Approximately 3+ years of relevant cybersecurity, OT security or industrial automation experience.
• Experience performing OT cybersecurity assessments, architecture reviews or risk analyses.
• Knowledge of OT and IC environments such as SCADA, DCS, PLC, RTU or HMI.
• Familiarity with ISA/IEC 62443, NIST SP 800-82, NIST CSF or equivalent guidance.
• Experience producing professional reports, presentations or architecture artifacts.
• Ability and willingness to travel as needed.

Responsibilities

• Conduct OT cybersecurity maturity assessments, risk analyses, gap analyses, security audits and architecture reviews.
• Assess industrial environments including ICs, SCADA, DCS, PLC, RTU and IIoT technologies.
• Review OT network architectures, firewall rules, secure remote access and system hardening.
• Support OT cybersecurity strategies, roadmaps, policies and reference architectures.
• Design and support implementation of OT security solutions considering safety and reliability.
• Prepare client deliverables, architecture diagrams and executive presentations.
• Lead defined workstreams and assist project planning and budgeting.
• Mentor junior team members and contribute to proposals and thought leadership.

Job description

EY is seeking an OT cybersecurity consultant to advance industrial control system security across diverse clients in the U.S. You will perform risk assessments, architecture reviews and strategy development while collaborating with engineering, operations and IT teams.

The role requires strong communication skills, the ability to translate technical findings for nontechnical audiences, and willingness to travel for client engagements.