OT Security Senior Consultant – Cybersecurity

About the role

EY is seeking an experienced OT Security Senior Consultant to join its Cybersecurity team. You will work with leading organisations across critical infrastructure and industrial sectors, helping them strengthen their Operational Technology (OT) security posture.

Key responsibilities

• Conduct OT cybersecurity maturity, risk, and gap assessments against industry frameworks.
• Assess Industrial Control Systems (ICS), SCADA, DCS, PLC and IIoT environments.
• Define OT cybersecurity strategies, target operating models and transformation roadmaps.
• Review industrial network architectures, segmentation models and secure remote‑access solutions.
• Support compliance initiatives such as NIS2, IEC 62443 and related regulations.
• Perform vulnerability assessments, architecture reviews and OT security monitoring deployments.
• Collaborate with engineering, operations, maintenance and IT teams to implement security improvements with minimal operational impact.
• Contribute to cyber‑resilience initiatives, incident response planning and recovery capabilities.
• Prepare client deliverables, executive reports, technical documentation and presentations.

Required profile

• 3‑6 years of experience in cybersecurity, OT or industrial automation.
• Hands‑on experience in industrial environments such as Energy & Utilities, Oil & Gas, Manufacturing, Water, Chemicals, Mining or Transportation.
• Strong understanding of industrial cybersecurity concepts including the Purdue Enterprise Reference Architecture, ICS, DCS, SCADA and Safety Instrumented Systems.
• Familiarity with relevant cybersecurity frameworks and standards (IEC 62443, NIST CSF, NIST SP 800‑82).

Required skills

• Industrial Control Systems (ICS)
• SCADA
• Distributed Control Systems (DCS)
• Programmable Logic Controllers (PLC)
• Industrial Internet of Things (IIoT)
• Purdue Enterprise Reference Architecture (PERA)
• IEC 62443
• NIST Cybersecurity Framework (CSF)
• NIST SP 800‑82