[Hiring] Operational Technology Cybersecurity Consultant @Transit Safety & Security Solutions

Role Description

The Company seeks one or more Operational Technology Cybersecurity Consultant(s) (“Contractor”) to provide cybersecurity consulting, assessment, risk management, and technical advisory services for Operational Technology (OT), Enterprise Control Systems (ECS), and associated information technology environments, on an as-needed, project-based basis. The Consultant will help the Company identify, assess, and mitigate cybersecurity risks affecting critical operational systems and infrastructure. The role works collaboratively with engineering, information technology, cybersecurity, safety, operations, project management, and client stakeholders to improve the security and resilience of OT environments while maintaining operational availability, safety, and reliability. The role may support the Company's communications infrastructure, SCADA systems, and other critical infrastructure.

Qualifications

• Experience in cybersecurity consulting, particularly in OT and ICS environments.
• Familiarity with cybersecurity frameworks and standards (e.g., NIST, ISA/IEC).
• Strong analytical and problem-solving skills.
• Excellent communication and collaboration abilities.

Requirements

• Conduct cybersecurity risk assessments of OT, ICS, SCADA, networks, and associated IT/OT environments.
• Identify cybersecurity vulnerabilities, threats, control deficiencies, and operational risks.
• Conduct or support cybersecurity gap assessments, maturity assessments, vulnerability assessments, and security-control reviews.
• Support implementation and assessment of cybersecurity frameworks and standards.
• Develop risk registers, prioritized remediation plans, and recommendations.
• Prepare cybersecurity assessment reports, technical memoranda, risk analyses, findings, recommendations, and executive-level presentations.
• Coordinate with system engineers, IT personnel, operations personnel, vendors, contractors, and client cybersecurity teams.
• Perform OT cybersecurity architecture and design reviews for existing systems and new projects.
• Review or advise on OT network architecture, zoning, and conduits.
• Evaluate network architecture, segmentation, remote access, authentication, asset management, monitoring, logging, patch management, vulnerability management, and incident-response capabilities.
• Assist with OT/ICS cybersecurity asset inventories, system categorization, risk registers, and remediation plans.
• Provide guidance on secure remote access and vendor connectivity.
• Review system designs, specifications, network diagrams, cybersecurity documentation, vendor submissions, and technical requirements.
• Collaborate with and evaluate third-party and supply-chain cybersecurity risks.
• Assist Clients in developing and implementing cybersecurity programs, policies, standards, procedures, and technical controls.
• Develop cybersecurity requirements for procurements, contracts, system implementations, upgrades, and capital projects.
• Advise on alignment with general cybersecurity/privacy laws and regulations.
• Support client meetings, workshops, technical reviews, audits, and cybersecurity compliance activities.
• Assist clients in developing OT incident-response and recovery procedures.
• Track identified vulnerabilities and cybersecurity risks through remediation and closure.
• Maintain awareness of emerging OT cybersecurity threats, vulnerabilities, attack techniques, technologies, regulatory requirements, and industry best practices.
• Develop playbooks and incident severity classification for OT assets.
• Provide incident containment consulting to help triage and identify attack vectors.
• Develop and deliver remote training content for OT engineers and maintenance personnel.
• Perform additional cybersecurity consulting duties as assigned based on Project and Client requirements.

Benefits

• Competitive compensation.
• Flexible working arrangements.
• Opportunities for professional development and training.
• Collaborative work environment.