Job Description

Line of Service AdvisoryIndustry/SectorSpecialism Cybersecurity & PrivacyManagement Level Associate & Summary At PwC, our people in risk and compliance focus on maintaining regulatory compliance and managing risks for clients, providing advice, and solutions. They help organisations navigate complex regulatory landscapes and enhance their internal controls to mitigate risks effectively.As a risk management generalist at PwC, you will provide advisory and practical support to teams across a wide range of specialist risk and compliance areas.Driven by curiosity, you are a reliable, contributing member of a team. In our fast-paced environment, you are expected to adapt to working with a variety of clients and team members, each presenting varying challenges and scope. Every experience is an opportunity to learn and grow. You are expected to take ownership and consistently deliver quality work that drives value for our clients and success as a team. As you navigate through the Firm, you build a brand for yourself, opening doors to more opportunities.Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to:

• Apply a learning mindset and take ownership for your own development.
• Appreciate diverse perspectives, needs, and feelings of others.
• Adopt habits to sustain high performance and develop your potential.
• Actively listen, ask questions to check understanding, and clearly express ideas.
• Seek, reflect, act on, and give feedback.
• Gather information from a range of sources to analyse facts and discern patterns.
• Commit to understanding how the business works and building commercial awareness.
• Learn and apply professional and technical standards (e.g. refer to specific PwC tax and audit guidance), uphold the Firm's code of conduct and independence requirements.

Key ResponsibilitiesConduct risk assessments and audits for operational technology systems to identify security weaknesses and potential threats.Identify and assess security risks and vulnerabilities in OT systems.Design and implement security controls and measures to protect OT systems from cyber threats, including intrusion detection systems, firewalls, access controls, and network segmentation.Develop OT security architecture and network segmentation designs.Collaborate with clients' cross-functional teams, including OT engineers, IT professionals, and management, to ensure cybersecurity considerations are integrated into the design, deployment, and maintenance of OT systems.Stay updated on emerging threats, vulnerabilities, and industry best practices related to OT cybersecurity.Provide technical expertise and guidance regarding OT security standards, policies, and procedures.Prepare and conduct security training and awareness programs, including OT-specific training for clients and internal teams.Conduct compliance assessments and prepare for OT certifications such as IEC 62443.Draft assessment reports including Executive Summary, observations/recommendations/peer comparisons, benchmark, etc.Contribute to practice enablement and business development activities (development of SOWs, RFPs in alignment to clients requirement, etc.)Drive initiatives to develop innovation quotient (publishing whitepapers, help develop business case for an innovative technical idea to seek investments, point of view, etc.)Position RequirementsOT (Operational Cybersecurity) experience, possibly in the industry or at another firm, with a strong understanding of OT systems and networks such as PLCs, DCSs, and other systems.Solid understanding of industrial control systems (ICS), supervisory control and data acquisition (SCADA) systems, and other OT technologies.Knowledge of OT-specific protocols and standards such as Modbus, DNP3, IEC 61850, and OPC.Good understanding of OT cybersecurity frameworks such as NIST 800-82 and ISA 62443 preferred.Knowledge of network security/hardening, whitelisting, and cybersecurity best practices.Familiarity with network segmentation techniques and security architecture for OT systems.Experience in industrial communication network and system security IEC 62443 standards.Knowledge of NIST CSF.Good knowledge of cybersecurity principles, theories, and techniques.Demonstrate application of business acumen while leveraging technologies.Desired KnowledgeExperience with OT monitoring tools or certifications preferred for products such as Claroty, Nozomi, Tenable, Armis, or other systems.Relevant OT certifications such as GICSP, IAS 62443, or similar are preferred.In-depth knowledge and understanding of OT security regulations and requirements.OT security assessments, risk assessments, and security risk analysis.Excellent leadership, teamwork, and collaboration skills.Knowledge of emerging OT security threats and vulnerabilities, and the ability to quickly adapt to new technologies and solutions.Experience with OT security tools and labs for development and processing.Years of experienceMinimum of 3-8 years of experience in an Operational Technology (OT) environment.Professional and Educational BackgroundBE / B Tech / MCA / MS / MBA (Field of Study: Computer and Information Science, Information Cybersecurity, Information Technology, Management Information Systems).Additional InformationTravel Requirements: Not ApplicableLine of Service: AdvisoryIndustry: ConsultingLocation: Bangalore, Hyderabad, Mumbai, KolkataEducation (if blank, degree and/or field of study not specified) Degrees/Field of Study required:Degrees/Field of Study preferred:Certifications (if blank, certifications not specified)Required SkillsOptional Skills Accepting Feedback, Accepting Feedback, Active Listening, Anti-Money Laundering (AML), Coaching and Training, Communication, Compliance Advisement, Compliance Oversight, Compliance Program Implementation, Compliance Risk Assessment, Confidential Information Handling, Contract Review, Contractual Risk Mitigation, Contractual Risk Monitoring, Contract Writing, Crisis Management, Data Loss Prevention (DLP), Data Security, Discretion and Business Ethics, Emotional Regulation, Empathy, Financial Risk Management, Governance Framework, Inclusion, Intellectual Curiosity {+ 27 more}Desired Languages (If blank, desired languages not specified)Travel Requirements Not SpecifiedAvailable for Work Visa Sponsorship? NoGovernment Clearance Required? NoJob Posting End Date

PwC