OT Security + Risk Assessment- Consultant - Bangalore

Job Summary:

We are seeking an experienced OT Security Consultant to support our clients in strengthening the security posture of their Operational Technology (OT) environments. The ideal candidate will be responsible for conducting OT risk assessments, identifying and prioritizing risks based on impact and likelihood, and recommending actionable mitigations and controls. A strong grasp of the ISA/IEC 62443 standard, coupled with hands-on experience in IT-OT network security and industrial control systems, is essential.

Key Responsibilities:

• Conduct comprehensive OT risk assessments across industrial environments, identifying key risk and potential impact.
• Assess and prioritize risks based on impact, likelihood, and business context.
• Perform IT-OT network security assessments, including architecture reviews, segmentation analysis, and traffic flow evaluations.
• Good Understanding of OT infrastructure such as PLC, DCS, MES, SCADA etc., network infrastructure elements, topology, configuration and data flow architecture.
• Experienced in IT-OT network security assessment, Network solution design, implement (Network architecture/ switches/ routers/ firewalls/ DMZ/AD etc ) for manufacturing environments.
• Align assessment methodologies with ISA/IEC 62443,NIST 800-53 standards and best practices.
• Deliver detailed assessment reports and risk matrices, including practical remediation recommendations.
• Collaborate with client stakeholders including engineering, operations, and cybersecurity teams.
• Provide guidance on secure network design, hardening of ICS components, and secure integration of IT/OT systems.

Required Qualifications:

• Bachelors or Master’s degree in Cybersecurity, Engineering, Computer Science, or a related field.
• 4 to 8 years of experience in OT cybersecurity or ICS/SCADA environments.
• In-depth knowledge of ISA/IEC 62443, NIST 800-53 and risk assessment frameworks.
• Hands-on experience with OT systems including PLCs, SCADA, DCS, HMIs, and Historian technologies.
• Strong understanding of industrial network protocols (Modbus, OPC, DNP3, etc.) and security principles.
• Familiarity with NIST CSF, NERC CIP, or ISO/IEC 27001 is a plus.

Preferred Certifications:

• ISA/IEC 62443 Cybersecurity Certifications
• GICSP (Global Industrial Cyber Security Professional)
• CCNA, PCNSA