Senior ICS Security Consultant

• Act as a trusted advisor to SGS ECL industrial clients
• Support and facilitate governance, risk, compliance journey as it relates to ICS/OT security
• Assess and evaluate industrial control system (ICS) environments in line with client requirements
• Write reports including pragmatic recommendations (focusing on return on investment) to improve industrial security posture and resilience
• Advise changes on the ICS network to strengthen current cybersecurity controls and introduce new controls.
• Ensure ICS/OT philosophies are business enablers, supporting stakeholders to avoid ‘department of no’ while balancing cyber security, operational, and business risk drivers.
• Document existing architecture and proposed defensible architectures.
• Work with SGS ECL Engineers as well as client internal/external stakeholders to support implementation, maintenance, and administration of systems.

• 10+ years’ experience with industrial control systems (ICS), DCS, SCADA, SIS, PLC, etc.
• 10+ years’ experience in networking, security and/or sysadmin with some industrial networking expertise
• A degree-level engineering, networking or cyber security qualification would be advantageous

• Excellent communication and analytical skills
• Ability to work independently or as part of a small team interfacing directly with clients
• An understanding of cyber security risks and mitigation for an industrial control network
• An understanding of cyber security management as a part of a full framework (e.g. Identify, Protect, Detect, Respond, Recover)
• Sound knowledge of networking protocols, cyber security of network traffic and the application of controls via switch and firewall configuration.
• The ability to carry out detailed industrial cyber assessments and/or audits to a high quality

• Commitment to ongoing learning & development
• Sustainability is embedded in our culture and the way we do business
• Career development opportunities (both nationally and globally)

SGS