- Company Name
- CLOSTERA
- Job Title
- Consultant Senior Cybersécurité OT / Cyber Industrielle (H/F)
- Job Description
-
**Job Title:**
Senior OT Cybersecurity Consultant
**Role Summary:**
Support the OT Cybersecurity Manager as an operational deputy. Operate on the field across manufacturing sites, leading the implementation of industrial cybersecurity governance, risk assessment, and compliance with regulatory frameworks such as NIS2. Serve as the primary OT security reference, driving risk mitigation, remediation, and training initiatives.
**Expectations:**
* Full-time engagement with regular travel within France and abroad.
* Minimum 5–10 years of cybersecurity experience, including substantial exposure to OT/ICS environments.
* Proven ability to work autonomously and lead multidisciplinary teams.
**Key Responsibilities:**
* Deploy to client sites to assess OT environments, identify vulnerabilities, and monitor risk posture.
* Develop and execute a structured GRC framework for OT, including policy creation, procedures, and standardization.
* Lead risk analysis activities and produce actionable risk‑management reports.
* Coordinate remediation plans, follow up on action items, and verify compliance against IEC 62443, ISA/IEC standards, and NIS2 requirements.
* Design and deliver cyber‑OT training modules, workshops, and visual tutorials for technical and non‑technical audiences.
* Facilitate governance, risk, and compliance (GRC) workshops and collaborate with global teams.
* Conduct security audits of OT systems, benchmark against industry standards, and recommend improvements.
* Maintain awareness of evolving industrial standards, regulatory changes, and emerging threats.
* Communicate findings and recommendations to stakeholders across technical and business lines.
**Required Skills:**
* Expert knowledge of OT systems (ICS, SCADA, PLCs, industrial networks).
* Deep familiarity with IEC 62443, ISA/IEC standards, and the Purdue Enterprise Reference Architecture.
* Strong experience in industrial cybersecurity risk analysis and GRC processes.
* Hands‑on audit and remediation experience in OT/ICS contexts.
* Proficiency in developing security policies, procedures, and documentation.
* Excellent verbal and written communication, capable of translating technical concepts to diverse audiences.
* Leadership and facilitation abilities for workshops and team collaboration.
* High adaptability to dynamic industrial environments.
* Fluency in English (both written and spoken).
**Required Education & Certifications:**
* Master’s degree or equivalent from an engineering, cybersecurity, or industrial computing program (Bac+5).
* Relevant professional certifications are a plus: CISSP, ISO 27001 Lead Auditor, IEC 62443-1‑x, or equivalent.