Cyber Risk Operational Technology Cybersecurity, Manager

Position Summary

Are you interested in working in a dynamic environment that offers opportunities for professional growth and new responsibilities? If so, Deloitte & Touche LLP could be the place for you!

Traditional security programs have often been unsuccessful in unifying the need to both secure and support technology innovation required by the business. Join Deloitte's Advisory Cyber Risk Operational Technology Cybersecurity team and become a member of the largest group of Cyber individuals worldwide.

Work you'll do

As an Operational Technology Cybersecurity Manager, you will help our clients develop proprietary assets by leveraging frameworks that will be applicable to a myriad of industries and clients who are assessing and improving their manufacturing and operational environments. Your role will:

• Identify and evaluate complex business and technology risks and remediation methods to mitigate risks
• Assist in the selection and tailoring of approaches, methods, and tools to support service offering or industry projects
• Actively participate in decision making with engagement management and seek to understand the broader impact of current decisions
• Facilitate use of technology-based tools or methodologies to review, design and/or implement products and services
• Identify opportunities to improve engagement profitability and manage engagement economics
• Demonstrate ability to identify and address client needs: building solid relationships with clients; developing an awareness of firm services; communicating with the client in an organized and knowledgeable manner; delivering clear requests for information; demonstrating flexibility in prioritizing and completing tasks; and communicating potential conflicts to the manager
• Demonstrate knowledge of market trends, competitor activities, Deloitte Advisory products and service lines
• Sales and pre-sales leadership: Leading sales, pre-sales, and delivery of large cyber security programs and managed security solutions. Support the standardization of hybrid advise/implement/operate solutions to enable contract and sales velocity

• BA/BS in cyber security, information security, engineering, computer science, information technology, information management, information sciences, business administration, or related field
• Minimum 8 years of experience developing Operational Technology cybersecurity solutions for industrial environments, including:
  • Working with Industrial Control Systems (ICS) technologies and/or environments. Examples include SCADA, DCS, Industrial Control Systems (ICS), RTUs, IACS, PLCs, HMIs, Engineering Workstations, Historians, etc.
  • Working in emerging information security disciplines (e.g., mobile security, cloud security, IOT security, SCADA / industrial control systems security, etc.)
• 8+ years of cyber security or cyber risk management experience
• Advanced capabilities in Microsoft Excel, Word, and PowerPoint
• Broad IT knowledge in networks, architecture, infrastructure, firewalls, etc.
• Scripting or Programming experience (Python, PowerShell)
• Excellent verbal and written communication skills
• Demonstrate ability to convey complex technical subjects in a concise and direct manner
• Demonstrate problem solving, critical thinking, logical structuring skills and a willingness to learn and stretch outside of your comfort zone
• Ability to travel up to 50% (While up to 50% travel is a requirement of the role, due to COVID-19, non-essential travel has been suspended until further notice)

• MS/PhD in cyber security, information security, engineering, computer science, information technology, information management, information sciences, business administration, or related field
• Previous experience providing consulting services to Fortune / Global 1000 clients and/or domain experience within relevant industry verticals such as Chemicals & Petroleum, Utilities, Manufacturing, Transportation, Consumer Products, etc.
• Fundamental understanding of IT and OT network communication protocols (For example: TCP/IP, UDP, DNP3, Modbus, IEC 61850, OPC, OPC UA, PROFINET, HART, Foundation Fieldbus, etc.)
• Previous experience assessing against standards and frameworks including IEC-62243/ISA-99, ISA-95, NIST SP 800-82 R2, NIST CSF, NERC CIP, ISO 27001/27002, Mitre ATT&CK, etc.
• Experience working with, protecting, and administering critical industrial network infrastructures, with demonstrable experience working with automation vendors such as ABB, Siemens, Rockwell, Honeywell, Foxboro, Emerson, Yokogawa etc.

• • IT program management
  • Cyber security
  • Service delivery and operations
  • Third party management
  • Data management
  • Application management/SDLC
  • Service continuity management
  • Knowledge and understanding of industry standards and regulatory requirements around cybersecurity risk management in Industrial Environment (e.g., ISA-62443, NIST CSF and 800-82, NERC-CIP, ISO 27001)