OT Security Consultant

Introduction
Information and Data are some of the most important organizational assets in today’s businesses. As a Security Consultant you will be a key advisor for IBM’s clients analyzing business requirements to design and implement the best security solutions for their needs. You will apply your technical skills to find the balance between enabling and securing the client’s organization with the cognitive solutions that are making IBM the fastest growing enterprise security business in the world.

Your Role and Responsibilities
OT/IoT Security Consultants are the front line of the Security Services delivery organization working to understand and solve client challenges at industry-leading organizations. They act as trusted advisors applying consulting methodologies and industry knowledge to drive transformation and provide value to our clients. These engagements encompass the full end to end lifecycle from initial client engagement through assessments and road-mapping to longer term engagement in an advisory capacity. OT/IoT Security Consultants also leverage the technical expertise of the security competencies varied product portfolios and delivery capabilities of the wider IBM to best solve problems in an ever-changing industry. Influences Functional Strategy.
Our ICS security consultants are expected to anticipate security requirements analyze and understand the client security posture and formulate right-sized solutions based on industry leading practices tailored to their specific industries. An ICS Cybersecurity consultant is responsible for leading ICS security vulnerability assessments and remediation activities along with providing recommendations across a broad range of security domains. An ICS Cybersecurity consultant must be proficient with industrial networking and be able to either lead or support ICS vulnerability assessments and remediation efforts.

Required Technical and Professional Expertise

• Experience in developing OT/IoT cybersecurity solutions for industrial environments
• Experience working with ICS (Industrial Control System) technologies and/or environments. Examples include SCADA DCS RTUs IACS PLCs HMIs Engineering Workstations Historians etc.
• IT knowledge in networks architecture infrastructure firewalls etc.
• Excellent verbal and written communication skills. Ability to develop proposals points of view OT security program specifics etc
• Ability to communicate in English (Spanish as a plus)
• Willingness to travel up to 20% or as needed
• Experience with ISA/IEC-62443 framework and experience with NIST SP 800-82R3.
• Preferred location Monterrey
• Experience with OT thread management
• Experience with OT Cybersecurity programs

Preferred Technical and Professional Expertise
• Familiarity with ICS security solutions such as Nozomi Armis Claroty Fortinet etc.
• Experience working with protecting and administering critical industrial network infrastructures with demonstrable experience working with automation vendors such as ABB Siemens Rockwell Honeywell Emerson Yokogawa etc.
• Experience working directly in an industrial and/or manufacturing environment is a plus.
• Self-motivated and results focused; ability to strengthen the team and its mission
• ISA/IEC-62443 Specialist Global Industrial Cybersecurity Professional (GICSP) Certified SCADA Security Architect (CSSA) or Certified Information Systems Security Professional (CISSP) Certifications a plus
• Fundamental understanding of IT and OT network communication protocols (For example: TCP/IP UDP DNP3 Modbus IEC 61850 OPC OPC UA PROFINET HART Foundation Fieldbus etc.)
• Bachelor’s degree in Engineering (Industrial Automation Electronic Electrical) or correlated area.