OT Cybersecurity Consultant con Inglés

As an OT Cybersecurity Consultant, you will be a key member of the central CISO team, reporting directly to the Corporate Cybersecurity OT Lead. In this role, you will actively contribute to securing the safety, continuity, and cyber resilience of our global industrial systems and manufacturing processes. You will collaborate closely with the OT Cybersecurity Center of Excellence (CCoE) to implement robust security policies, architectures, and risk mitigation strategies across our production environments.

Responsibilities:

• Roadmap Execution & Capability Deployment: Participate actively in the deployment of the company’s OT Cyber Roadmap, supporting initiatives from the proof-of-concept (PoC) phase through to final implementation and operational handover to site production teams.

• Risk Management & Vulnerability Assessments: Perform structured risk assessments on industrial control systems (ICS) to identify technical and procedural vulnerabilities. Evaluate potential operational risks and recommend pragmatic, cost-effective mitigation measures.

• Standards & Framework Governance: Assist in the definition, creation, and continuous improvement of corporate OT Security policies and standards, ensuring strict alignment with the NIST Cybersecurity Framework (CSF) and ISA/IEC 62443 standards.

• Operational Security Processes: Collaborate with cross-functional teams to design, implement, and audit core OT-specific security processes, including asset management, patch management, backup & recovery, and Secure Development Lifecycle (SDLC) for industrial projects.

• OT Center of Excellence Collaboration: Act as an active contributor within the OT Cybersecurity Center of Excellence, sharing knowledge, evaluating emerging industrial security technologies, and driving engineering best practices.

• Awareness & Culture: Develop, maintain, and deliver tailored OT cybersecurity awareness and training programs for plant operators, engineers, and local site managers to foster a strong safety-first cyber culture.

Required Skills & Qualifications:

• Education: Bachelor’s degree in Cybersecurity, Information Technology or a related technical field.

• Experience: 3 to 5 years of professional experience specifically within the field of Operational Technology (OT) security, industrial automation, or critical infrastructure protection.

• Standards Knowledge: Practical exposure to industrial security standards, specifically ISA/IEC 62443 and the NIST Cybersecurity Framework (CSF).

• Regulatory & Compliance Knowledge: Strong awareness or operational understanding of the NIS2 Directive; while not mandatory, knowledge of its requirements and impact on industrial operations is highly valuable.

• Soft Skills & Independence: Demonstrated ability to work proactively and independently in a highly decentralized environment, comfortably managing and collaborating with diverse stakeholders (from plant floor operators to corporate IT teams).

• Languages: Full professional fluency in English (both written and spoken) is mandatory, with the ability to draft corporate-level technical documentation and governance policies.

Preferred & Highly Recommended Qualifications:

• Professional Certifications: Industrial cybersecurity certifications such as ISA/IEC 62443 Fundamentals/Specialist, GICSP (Global Industrial Cyber Security Professional), or equivalent credentials.

• Technical Familiarity: Hands-on understanding of common industrial systems (PLCs, HMIs, SCADA, DCS) and major automation vendors (e.g., Siemens, Rockwell Automation).

• Network Security: Basic understanding of industrial network segmentation (Purdue Model), industrial protocols (Modbus, Profinet, OPC UA), and secure remote access architectures.