Operational Technology (OT) Security & Consulting- Middle East clients

Title: OT Operation and Security Consultant

• Job Title:

  Senior Consultant/ Assistant Manager OT (Operational Technology) Security & Consulting

• Location:Anywhere in India (Any Protiviti office)

• Travel:

  Up to 70% travel to the Middle East (UAE, KSA, Oman, Qatar, Kuwait, Bahrain etc.)

• Experience: 8+ Years

• Preferred Certificate:

  ISA/IEC 62443 Certification (any level), CISA, CRISC, CEH

• Employment Type:

  Full-time | Auditing & Consulting | Client-facing

Position Summary:

Senior Consultant/ Assistant Manager OT Security & Consulting

The ideal candidate will bring deep domain knowledge in OT/ICS cybersecurity, solid audit experience, and the ability to work across industrial sectors including Oil & Gas, Utilities, Aviation, and Telecom.

Key Responsibilities:

OT Security Assessments

• Perform security audits of OT environments, including SCADA, PLC, DCS systems, and IIoT integrations.
• Review OT-specific policies and procedures for access management, configuration baselines, and asset inventories.
• Assess implementation of network segmentation, firewalls, and endpoint protection mechanisms in OT infrastructure.
• Evaluate OT vulnerability management, patching practices, and secure configurations.
• Assess backup & disaster recovery mechanisms for OT systems with focus on RTO/RPO alignment.
• Conduct OT-specific incident response readiness reviews, including logging, alerting, and simulation exercises.
• Review logging and monitoring practices using SIEM or similar tools for OT systems.

OT Governance & Strategic Alignment

• Review OT strategy documents and validate alignment with business objectives and regional regulations (e.g., GACAR, ICAO).
• Evaluate OT governance structures including roles, responsibilities, and oversight mechanisms.
• Assess integration of cybersecurity risk into strategic planning.
• Review OT-related stakeholder engagement and communication mechanisms.

Regulatory & Compliance

• Perform compliance assessments against global and regional standards: IEC 62443, NIST 800-82, NCA ECC, ISO 27019, GACAR, ICAO.
• Develop detailed audit reports, control gap analyses, and risk treatment recommendations.
• Support development of risk and control matrices (RCMs) and minimum baseline security standards.

Experience:

• Minimum of

  8+ years

  in OT/ICS cybersecurity, consulting, or auditing roles.
• Strong hands-on exposure to OT protocols (Modbus, DNP3, OPC, etc.), SCADA/DCS/PLC systems.
• Experience with risk assessment, control testing, and policy development in industrial environments.
• Prior consulting experience in sectors such as Energy, Utilities, Oil & Gas, Aviation, or Manufacturing is highly preferred.

Certifications (Mandatory: One or more recent):

• GICSP

  – GIAC Global Industrial Cyber Security Professional

• ISA/IEC 62443

  Certification (any level)

• CISM

  or

  CISSP

  (preferred)

• CISA

  – Certified Information Systems Auditor (audit-focused candidates)

• ISO 27001:2022 Lead Auditor

• CRISC

  – Certified in Risk and Information Systems Control (desirable)

kirti.goyal@protivitiglobal.in