Join EY's Technology Consulting team as a Senior Cyber Security professional specializing in Operational Technology (OT) Security. You will play a pivotal role in helping clients navigate complex security challenges within their OT and Engineering environments. This position involves developing effective solutions that enhance security, reduce risk, and support informed decision-making.

This opportunity is within EY's Global Delivery Services (GDS), a worldwide network of service delivery centers that are crucial to EY's growth strategy. Our GDS team has grown significantly since 2002 and now comprises over 80,000 professionals across ten global locations, providing comprehensive support to our clients worldwide.

Monitor and analyze OT networks and security alerts using specialized tools. Identify suspicious activities, anomalies, and indicators of compromise within Industrial Control Systems (ICS) environments. Conduct Level 2 alert triage and investigations for OT incidents, and actively support incident response activities.

Develop a deep understanding of security-related operational processes within OT-ICS environments, including the technologies, assets, communication protocols, and technical architectures in use. Possess knowledge of cyber/information security concepts, risk management, and controls. Familiarity with functional safety (SIS) and security aspects of operating systems (Windows/Linux) and databases is also expected.

A minimum of 5 years of experience in Cyber Security and OT Security is required, along with a Bachelor of Technology (B.Tech.) or equivalent educational qualification. Key certifications such as ISA/IEC 62443 Fundamentals Specialist, CompTIA Network+, CompTIA Security+, and Cisco CCNA (Industrial) are essential.

Demonstrated knowledge of OT network monitoring solutions like Nozomi, Claroty, Armis, DarkTrace, or Defender for IoT is crucial. Expertise in OT-ICS Security standards including ISA/IEC 62443, NIST 800-82, and NERC-CIP is expected. Understanding of IT/OT/IoT communication protocols such as TCP/IP, DNP3, Modbus, and IEC 61850 is also a requirement. Prior experience working with delivery leads and architects to identify and manage risks is considered a valuable asset.