Risk Consulting- Manager- DigitalRisk - OT Risk

We are looking for a manager with expertise in IT/ OT Assessments/Framework Implementation to join the Digital Risk team. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth of our service offering.

Your key responsibilities

• Responsible for working with multiple client engagements and teams at a Senior level within the MENA region.
• Lead and deliver OT Risk assessments, Architecture review, and maturity evaluation across DCS and ICS environments.
• You can expect to work with high level client personnel to address Information security, IT/OT Security and Business continuity risks.
• You are also expected to perform internal control testing, develop control frameworks, and provide internal audit services in IT/OT/InfoSec space for the MENA stakeholders.
• You will assess the clients current state of internal controls and identify risks and subsequent recommendations.
• Working with client personnel to analyse, evaluate and enhance systems facilitating the process control, and assisting clients and other technology professionals in performing IT/OT control audits, IT/OT security framework development engagements.
• Mentor and coach junior team members, fostering their technical and professional development.
• Help develop/respond to go to market, RFP/RFI responses.
• Practice building

Skills and attributes for success

• Strong knowledge of industrial control systems (ICS), SCADA systems, and other OT technologies.
• Good understanding of how OT and IT devices interact with each other and how OT devices work.
• Good to have knowledge of regulatory requirements and standards related to ICS/OT security (e.g., NIST, IEC 62443)
• Excellent communication and stakeholder management skills, especially in cross functional industrial settings.
• Experience with network security solutions, including firewalls, intrusion detection systems (IDS) etc.
• Analytical skills to screen through data and logs to identify the patterns indicative of cyber threats or threat actor methods.
• Effective communication skills for interacting with technical and non-technical colleagues and stakeholders.
• Demonstrating and applying strong project management skills, inspiring teamwork, and responsibility with engagement team members
• Relevant certifications are desirable.

To qualify for the role, you must have

• A bachelors degree
• A minimum of 10-15 years of experience working as Information security professional with IT/IS/OT internal audit background in a professional services firm.
• Excellent communication skills with consulting experience preferred.
• A valid passport for travel.

Ideally, youll also have

• B. Tech/ B.E. / B.Sc. / M. Sc. in Computer Applications / Engineering, or a related discipline.
• ISA 62443 expert, CISA, CISSP, GICSP (anyone certification is desired)