Connect to your opportunity

As an OT Cybersecurity Consultant, you will help support clients in assessing, designing, implementing, and transforming cybersecurity across Operational Technology (OT), Industrial Control Systems (ICS), and connected industrial environments. You will help clients strengthen the security and resilience of their OT environments, supporting the safe and reliable operation of critical industrial systems. Additionally, you will also help clients understand their cyber exposure and prioritize improvements that address risk while respecting operational requirements.

Key Responsibilities:

• Conduct OT cybersecurity gap, risk, maturity, compliance, threat modeling, and control-effectiveness assessments, alongside vulnerability assessments, configuration reviews, and authorized penetration testing using OT-safe methods coordinated with operations and engineering teams.
• Develop and operationalize OT cybersecurity control frameworks aligned with industry standards and applicable regulations, supported by policies, standards, procedures, accountability structures, operating models, and performance metrics.
• Define OT cybersecurity strategies, target-state capabilities, transformation programs, investment priorities, and risk-based implementation roadmaps.
• Review and design secure OT architectures covering network segmentation, zones and conduits, industrial DMZs, IT/OT integration, and secure remote connectivity.
• Evaluate technologies and security controls, identify capability gaps, and support requirements definition, solution selection, proofs of concept, and implementation assurance.
• Design, deploy, configure, and integrate asset discovery, logging and monitoring, IDS, SIEM, endpoint protection, application allowlisting, IAM/PAM, patch and vulnerability management, firewalls, switches, secure remote access, and system hardening.
• Establish asset inventories, ownership and criticality models, and lifecycle management processes addressing vulnerabilities, obsolescence, and legacy-system risks.
• Develop OT monitoring use cases, detection capabilities, threat intelligence processes, threat-hunting approaches, and SOC integration; develop and exercise incident response, backup and recovery, disaster recovery, and cyber resilience capabilities aligned with operational continuity and safety requirements.
• Assess and secure industrial IoT, private 5G, smart cities, digital manufacturing, robotics, digital twins, edge/cloud integration, and AI-enabled industrial systems.
• Embed security requirements across procurement, engineering, system integration, change management, commissioning, maintenance, and decommissioning; assess suppliers, integrators, service providers, and product security, and define contractual requirements and controls for third-party connectivity and access.
• Deliver role-based awareness, technical training, workshops, and exercises for operations, engineering, IT, and security stakeholders.
• Lead workstreams, coordinate stakeholders and vendors, prepare technical and executive deliverables, and support knowledge development. Identify client needs and opportunities, and contribute to proposals, solution approaches, scope definition, effort estimates, business cases, and presentations.

Connect to your skills and professional experience.

To succeed in this role, you will need to match the following criteria:

• Bachelor s degree in computer science, Cybersecurity, Engineering, or a related technical field.
• 3 - 8 years of experience in OT cybersecurity, with a strong focus on penetration testing and threat intelligence.
• In-depth knowledge of OT/ICS protocols (e.g., Modbus, DNP3, OPC, IEC 61850) and industrial control systems architecture.
• Experience in OT cybersecurity consulting, industrial automation and securing OT/ICS environments
• OT Intrusion Detection System design and implementation experience.
• Familiarity with OT security standards and frameworks such as ISA/IEC 62443, NIST SP 800-82.
• Excellent analytical, problem-solving, and communication skills.
• The ability to explain technical findings clearly and adapt reports and recommendations for business stakeholders, security teams, plant operators, and engineers.
• Experience producing client-ready deliverables and contributing to consulting engagements, including coordinating workstreams, stakeholders, or vendors.
• Experience supporting business development, such as developing proposal content, defining solution approaches or scope, estimating effort, or presenting to clients
• Relevant certifications such as GIAC GICSP, ISA 62443 Expert, CISSP, OSCP or similar are highly desirable.
• Fluency in English is a must.

Connect to your service line Technology and Transformation

Distinctive thinking, deep expertise, and collaborative working. That s what connects us. That s what makes us Deloitte. If you want to help solve some of the biggest challenges around, join us. Together, we ll make an impact that matters.

Personal independence

Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to several audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.

Desired Candidate Profile

• Bachelor s degree in computer science, Cybersecurity, Engineering, or a related technical field.
• 3 - 8 years of experience in OT cybersecurity, with a strong focus on penetration testing and threat intelligence.
• In-depth knowledge of OT/ICS protocols (e.g., Modbus, DNP3, OPC, IEC 61850) and industrial control systems architecture.
• Experience in OT cybersecurity consulting, industrial automation and securing OT/ICS environments
• OT Intrusion Detection System design and implementation experience.
• Familiarity with OT security standards and frameworks such as ISA/IEC 62443, NIST SP 800-82.
• Excellent analytical, problem-solving, and communication skills.
• The ability to explain technical findings clearly and adapt reports and recommendations for business stakeholders, security teams, plant operators, and engineers.
• Experience producing client-ready deliverables and contributing to consulting engagements, including coordinating workstreams, stakeholders, or vendors.
• Experience supporting business development, such as developing proposal content, defining solution approaches or scope, estimating effort, or presenting to clients
• Relevant certifications such as GIAC GICSP, ISA 62443 Expert, CISSP, OSCP or similar are highly desirable.
• Fluency in English is a must.