Senior OT Cybersecurity & ICS Consultant

EY; San Jose (CA); On-site; USD 131,000 - 219,000; Full time

Job summary

EY in the United States is seeking an OT Cybersecurity Senior or Senior Consultant to lead defined workstreams across OT security assessments, architecture, and implementation initiatives for industrial environments.

You will work with clients, produce technical and executive deliverables, and mentor junior staff while applying ISA/IEC 62443, NIST CSF, and other standards to improve security and resilience.

Qualifications

• Bachelor's degree or equivalent within cybersecurity, IT, engineering, or related field.
• 3+ years in cybersecurity, OT security, or industrial automation.
• Experience with OT cybersecurity assessments, architecture reviews, risk analysis or design.
• Knowledge of OT/ICS environments (SCADA, DCS, PLC, RTU, HMI).
• Familiarity with ISA/IEC 62443, NIST SP 800-82, NIST CSF or comparable guidance.
• Willingness to travel based on client/project needs.

Responsibilities

• Conduct OT cybersecurity maturity assessments, risk analyses and vulnerability assessments.
• Assess industrial environments including ICS, SCADA, DCS, PLC, RTU, HMI and IIoT.
• Review OT network architectures, segmentation, firewall rules and secure remote access.
• Support OT cybersecurity strategies, roadmaps, standards and implementation plans.
• Design and support OT security solutions considering safety and reliability.
• Stay current on OT threats, vulnerabilities and regulatory developments.

Skills

OT cybersecurity

ICS knowledge

Risk assessment

Technical writing

Stakeholder management

Travel willingness

Education

Bachelor's degree in cybersecurity or related field

Tools

ISA/IEC 62443

NIST SP 800-82

NIST CSF

Job description

EY in the United States is seeking an OT Cybersecurity Senior or Senior Consultant to lead defined workstreams across OT security assessments, architecture, and implementation initiatives for industrial environments.

You will work with clients, produce technical and executive deliverables, and mentor junior staff while applying ISA/IEC 62443, NIST CSF, and other standards to improve security and resilience.