Participate in risk assessments for new or evolving technologies, systems, and third-party services.
Track the progress of security reviews, vulnerability remediation, and configuration and change activities.
Ensure defined processes, including risk assessments, approvals, and reviews, are consistently followed.
Coordinate security reviews, remediation efforts, and assurance activities.
Identify gaps in workflows and contribute to process improvements.
Maintain and support accurate inventory of OT and digital assets across environments.
Organize system-level information, including ownership, network relationships, and configuration baselines.
Support configuration monitoring efforts by identifying and validating changes within control systems.
Administer and support OT security platforms used for asset visibility, configuration monitoring, vulnerability management, and threat detection.
Assist with tuning and improving platform outputs to reduce noise and improve usability.
Monitor and report on ongoing compliance with internal standards and external frameworks.
Identify, assess, and track vulnerabilities through remediation.
Support incident response activities by organizing information, tracking actions, and assisting coordination.
Validate that remediation actions are completed and effective.
Develop and maintain dashboards and reports related to asset visibility, vulnerability status, configuration changes, control effectiveness, and compliance posture.
Track and report control gaps, deficiencies, and remediation status to support assurance and audit readiness.
Support audit, compliance, and assurance activities by maintaining documentation, organizing and maintaining evidence, supporting control walkthroughs and documentation, and tracking requirements aligned with frameworks such as NIST, ISO 27001, NERC CIP, or similar.
Provide clear, structured reporting to stakeholders and leadership.
Develop and maintain Standard Operating Procedures (SOPs), process documentation, security guidelines, and internal standards.
Ensure documentation is consistent, current, and aligned across teams.
Support enforcement and adoption of security policies and standards across teams.
Work closely with engineering and product teams, operations and field personnel, OT and IT security teams, and regulatory and compliance stakeholders.
Facilitate communication and ensure alignment between technical teams and security processes.
Bachelor’s Degree or equivalent education in Computer Science, Information Systems, Information Security, or another Information Technology-related field.
3–7 years of experience in OT cybersecurity, IT security, GRC, or operational environments.
Experience in industrial, energy, or regulated environments preferred.
Experience supporting OT security programs in regulated environments is preferred.
Exposure to audit processes and compliance reporting is preferred.
Familiarity with additional OT monitoring or detection tools is preferred.
Experience in energy, utilities, or oil & gas sectors is preferred.
