Operational Technology Security Lead

Our client, a top-tier Management Consulting firm, is seeking a skilled OT Security Specialist to design and lead a IT/OT Security Program for a client in the greater Philadelphia area. The successful candidate will be responsible for developing, implementing, and managing security strategies to protect client operational technology (OT) and information technology (IT) environments. This role requires a deep understanding of both IT and OT systems, as well as the unique security challenges faced by the manufacturing industry.

Requirements and Qualifications:

• Lead the development and execution of the IT/OT security program, ensuring alignment with industry best practices and regulatory requirements.
• Conduct risk assessments and vulnerability analyses to identify potential security threats to OT and IT systems.
• Develop and implement security policies, procedures, and controls to safeguard critical infrastructure and data.
• Collaborate with cross-functional teams, including IT, engineering, and operations, to integrate security measures into existing processes and systems.
• Provide expert guidance and training to staff on OT security best practices and awareness.
• Current on emerging security trends, technologies, and regulatory changes affecting the manufacturing sector.
• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field. A Master's degree is preferred.
• Relevant certifications such as CISSP, CISM, GICSP, or similar are highly desirable.
• Minimum of 5 years of experience in OT security, with a focus on IT/OT integration in a manufacturing environment.
• Strong knowledge of industrial control systems (ICS), SCADA systems, and network security protocols.
• Proven experience in leading security programs and managing cross-functional teams.
• Excellent problem-solving skills and the ability to work under pressure in a fast-paced environment.
• Strong communication and interpersonal skills, with the ability to effectively convey complex security concepts to non-technical stakeholders.