Job Description

Line of Service AdvisoryIndustry/Sector Not ApplicableSpecialism RiskManagement Level Senior Associate & Summary A career within Cybersecurity and Privacy services, will provide you with the opportunity to help our clients implement an effective cybersecurity programme that protects against threats, propels transformation, and drives growth. As companies pivot toward a digital business model, exponentially more data is generated and shared among organisations, partners and customers. We play an integral role in helping our clients ensure they are protected by developing transformation strategies focused on security, efficiently integrate and manage new or existing technology systems to deliver continuous operational improvements and increase their cybersecurity investment, and detect, respond, and remediate threats.*Why PWCAt PwC, you will be part of a vibrant community of solvers that leads with trust and creates distinctive outcomes for our clients and communities. This purpose-led and values-driven work, powered by technology in an environment that drives innovation, will enable you to make a tangible impact in the real world. We reward your contributions, support your wellbeing, and offer inclusive benefits, flexibility programmes and mentorship that will help you thrive in work and life. Together, we grow, learn, care, collaborate, and create a future of infinite experiences for each other. Learn more .At PwC, we believe in providing equal employment opportunities, without any discrimination on the grounds of gender, ethnic background, age, disability, marital status, sexual orientation, pregnancy, gender identity or expression, religion or other beliefs, perceived differences and status protected by law. We strive to create an environment where each one of our people can bring their true selves and contribute to their personal growth and the firms growth. To enable this, we have zero tolerance for any discrimination and harassment based on the above considerations. " & Summary: You will work as part of the Cybersecurity practitioners with extensive consulting and industry experience, helping our clients solve their complex business issues from assessments, strategy, governance to deploying OT security solutions. To be successful in this role you should have: 4-7years of experience:

• 2 -4 years of experience in Control systems

• o Minimum 2 years of experience in ICS/OT security mandatory certificates- GICSP or/and GRID or GIAC

• Experience in sectors including Electricity, Oil & Gas, Water, Transport & Logistics, Chemical, Power Sectors, Nuclear and Manufacturing.

• Experience of working with IT security managers, Plant managers and ICS/OT engineers

• Broad range of security experience with a distinct specialization in the following areas:

o Subject matter expert (SME) on ICS/OT topics for the larger consulting practiceo Design and architect security standards for ICS networks across devices of multiple OEMs o Strong understanding of IT and OT network communication protocols (E.g TCP/IP, UDP, DNP3, Modbus, IEC 61850, OPC, OPC UA, PROFINET, etc.)o Have extensive working and implementation experience of security standards (e.g. IEC 62443, NIST 800-82, NCSC/CPNI SICS Framework etc.)o Should have lab/ real-life experience with Penetration testing PLC- s, SCADA o Must be proficient with Security monitoring architecture for ICS networks

• Create niche propositions for ICS security across relevant industries. Converse with clients around their problems and challenges and be able to arrive at solutions tailored to their needs

Responsibilities:

• Setup/ orchestrate a test lab for simulating real-world attacks and be able to create an experience center for clients

• Contribute to the firms overall Cybersecurity practice priorities and aspirations

Mandatory skill sets:GICSP or/and GRIDPreferred skill sets:GICSP or/and GRIDYears of experience required: 4+Education qualification:

• BE/ B.Tech with a good academic background

• Atleast one or more certifications from: CISSP, ISO 27001, CISA, CRISP, Global Industrial Cyber Security Professional (GICSP) of SANS

• Familiarity with ISO/IEC 62443, NIST SP 800-82, NIST RMF

Education (if blank, degree and/or field of study not specified) Degrees/Field of Study required: Bachelor of EngineeringDegrees/Field of Study preferred:Certifications (if blank, certifications not specified)Required Skills Operational Technology (OT) SecurityOptional Skills Accepting Feedback, Accepting Feedback, Active Listening, Analytical Thinking, Azure Data Factory, Communication, Creativity, Cybersecurity, Cybersecurity Governance, Data Architecture, Data Archiving, Data Flow Mapping, Data Privacy Act, Embracing Change, Emotional Regulation, Empathy, Enterprise Content Management, Incident Response Plan, Inclusion, Information Rights Management (IRM), Information Security, Information Security Governance, Information Security Management System (ISMS), Intellectual Curiosity, IT Infrastructure {+ 11 more}Desired Languages (If blank, desired languages not specified)Travel Requirements Not SpecifiedAvailable for Work Visa Sponsorship? NoGovernment Clearance Required? NoJob Posting End Date

PwC