Cyber - Operational Technology (OT) / ICS Security - Senior Associate - Full-time / Part-time

A career in our Security Architecture practice, within Cybersecurity and Privacy services, will provide you with the opportunity to help our clients implement an effective cybersecurity programme that protects against threats, propels transformation, and drives growth. As companies pivot toward a digital business model, exponentially more data is generated and shared among organisations, partners and customers. You’ll play an integral role in helping our clients ensure they are protected by developing transformation strategies focused on security, efficiently integrate and manage new or existing technology systems to deliver continuous operational improvements and increase their cybersecurity investment, and detect, respond, and remediate threats. In joining, you’ll be a part of a team that helps organisations design and create sustainable security solutions to provide foundational capabilities and operational discipline through a focus on enterprise requirements and prioritisation, Information Technology security architecture, and the software development lifecycle.

To really stand out and make us fit for the future in a constantly changing world, each and every one of us at PwC needs to be an authentic and inclusive leader, at all grades/levels and in all lines of service. To help us achieve this we have the PwC Professional; our global leadership development framework. It gives us a single set of expectations across our lines, geographies and career paths, and provides transparency on the skills we need as individuals to be successful and progress in our careers, now and in the future.

As a Senior Associate, you'll work as part of a team of problem solvers, helping to solve complex business issues from strategy to execution. PwC Professional skills and responsibilities for this management level include but are not limited to:

• Use feedback and reflection to develop self awareness, personal strengths and address development areas.
• Delegate to others to provide stretch opportunities and coach to help deliver results.
• Develop new ideas and propose innovative solutions to problems.
• Use a broad range of tools and techniques to extract insights from from current trends in business area.
• Review your work and that of others for quality, accuracy and relevance.
• Share relevant thought leadership.
• Use straightforward communication, in a structured way, when influencing others.
• Able to read situations and modify behavior to build quality, diverse relationships.
• Uphold the firm's code of ethics and business conduct.

Preferred skills

Demonstrates thorough knowledge and/or proven record of success designing and implementing security solutions for industrial control Systems (ICS) in critical infrastructure and/or manufacturing sectors, such as power and utilities, oil & gas, chemical, and consumer products manufacturing. The ideal candidate will possess an understanding of ICS/OT fundamentals, including but not limited to:

• Understanding of Distributed control systems (DCS) and supervisory control & data acquisition (SCADA) architecture;
• Understanding of Network and communication protocols common in ICS environments;
• Understanding of ICS design considerations with emphasis on human safety and the availability/security of operating environment;
• Understanding and Knowledge of leading IT and OT security practices; and,
• Preparation and maintenance of policies, procedures and standards governing the security operations for ICS systems and networks.

Demonstrates thorough knowledge and/or proven record of success in security technologies such as firewalls, IDS/IPS, endpoint security solutions, access control systems, and other related security technologies within ICS environment, including the following:

• In depth understanding of operating systems, network/system architecture, and IT architecture design;
• In depth understanding with operational technologies such as Programmable Logic Controllers (PLCs), Supervisory Control and Data Acquisition (SCADA) software, and Distributed Control Systems (DCS);
• In depth understanding of infrastructure and network architecture and design, LAN/WAN implementation, and Windows/Linux environments;
• Understanding of IT and OT network communication protocols (including TCP/IP, UDP. DNP3, Modbus, IEC 61850, OPC, OPC UA, and PROFINET) and ability to perform packet analysis; and,
• Understanding of threats, vulnerabilities, and exploits in ICS environments and appropriate mitigation techniques.

Demonstrates a thorough level of abilities with, and/or a proven record of success as both an individual contributor and team member, identifying and addressing client needs in the following areas:

• Working on complex systems, being customer-centric, and delivering results while solving security challenges in innovative ways;
• Bringing high level energy, sense of urgency, decisiveness, and ability to work well under pressure; and,
• Focusing on client relationship building and relationship management.

Minimum years experience required

• 3 year(s)

Additional application instructions

The Senior Associate of Operational Technology (OT) Security is a security professional who is able to balance risk management and security requirements with manufacturing and business objectives. The role will engage with business leaders and manufacturing stakeholders to enhance understanding, identification, management, and remediation of security risks to operational technology supporting core business processes.

All qualified applicants will receive consideration for employment at PwC without regard to race; creed; color; religion; national origin; sex; age; disability; sexual orientation; gender identity or expression; genetic predisposition or carrier status; veteran, marital, or citizenship status; or any other status protected by law. PwC is proud to be an affirmative action and equal opportunity employer.