Risk Consulting-Manager-OT Risk Consulting-Review

EY-Digital Risk – OT – Manager

As part of our Risk Consulting, you will be joining the Digital Risk Consulting Team. As part of the Consulting, you will handle leading and managing OT security engagements for various clients across the MENA region. Working with Digital Risk team, you will also perform IT/IS/OT Risk assessment, IT/IS Governance, ERP reviews and conduct maturity assessment on the client’s current IT/IS/OT posture. The client base spans across various sectors and includes collaboration with other teams within Consulting services.

The opportunity

We are looking for a manager with expertise in IT/ OT Assessments/Framework Implementation to join the Digital Risk team. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth of our service offering.

Your key responsibilities

• Responsible for working with multiple client engagements and teams at a Senior level within the MENA region.
• Lead and deliver OT Risk assessments, Architecture review, and maturity evaluation across DCS and ICS environments.
• You can expect to work with high level client personnel to address Information security, IT/OT Security and Business continuity risks.
• You are also expected to perform internal control testing, develop control frameworks, and provide internal audit services in IT/OT/InfoSec space for the MENA stakeholders.
• You will assess the client’s current state of internal controls and identify risks and subsequent recommendations.
• Working with client personnel to analyse, evaluate and enhance systems facilitating the process control, and assisting clients and other technology professionals in performing IT/OT control audits, IT/OT security framework development engagements.
• Mentor and coach junior team members, fostering their technical and professional development.
• Help develop/respond to go to market, RFP/RFI responses.
• Practice building

Skills and attributes for success

• Strong knowledge of industrial control systems (ICS), SCADA systems, and other OT technologies.
• Good understanding of how OT and IT devices interact with each other and how OT devices work.
• Good to have knowledge of regulatory requirements and standards related to ICS/OT security (e.g., NIST, IEC 62443)
• Excellent communication and stakeholder management skills, especially in cross functional industrial settings.
• Experience with network security solutions, including firewalls, intrusion detection systems (IDS) etc.
• Analytical skills to screen through data and logs to identify the patterns indicative of cyber threats or threat actor methods.
• Effective communication skills for interacting with technical and non-technical colleagues and stakeholders.
• Demonstrating and applying strong project management skills, inspiring teamwork, and responsibility with engagement team members
• Relevant certifications are desirable.

To qualify for the role, you must have

• A bachelor’s degree
• A minimum of 10-15 years of experience working as Information security professional with IT/IS/OT internal audit background in a professional services firm.
• Excellent communication skills with consulting experience preferred.
• A valid passport for travel.

Ideally, you’ll also have

• B. Tech/ B.E. / B.Sc. / M. Sc. in Computer Applications / Engineering, or a related discipline.
• ISA 62443 expert, CISA, CISSP, GICSP (anyone certification is desired)

What working at EY offers

At EY, we are dedicated to helping our clients, from startups to Fortune 500 companies — and the work we do with them is as varied as they are.

You get to work with inspiring and meaningful projects. Our focus is education and coaching alongside practical experience to ensure your personal development. We value our employees, and you will be able to control your own development with an individual progression plan. You will quickly grow into a responsible role with challenging and stimulating assignments. Moreover, you will be part of an interdisciplinary environment that emphasizes high quality and knowledge exchange. Plus, we offer:

• Support, coaching and feedback from some of the most engaging colleagues around
• Opportunities to develop new skills and progress your career.
• The freedom and flexibility to handle your role in a way that’s right for you