Job Title

Job DescriptionRole: Principal Cybersecurity Specialist - OT Risk.Experience: 15 YearsLocation: HyderabadThe ideal candidate should have at least 15yrs of IT experience, must be strong in GRC and must be well versed with assessing risk and prescribing controls in OT environments. Thorough knowledge of IEC 6433 and NIST-CSF standards and experience in running an OT Risk team/practice earlier would be preferred.Job SummaryThe Principal OT Risk & Governance Analyst is responsible for leading the development, implementation, and oversight of risk management, governance frameworks, and compliance initiatives for Operational Technology (OT) environments in manufacturing. This role ensures that OT security controls align with corporate policies, industry regulations, and cybersecurity best practices, while also supporting risk assessments and audit readiness.Key ResponsibilitiesRisk Management & ComplianceLead OT risk assessments, identifying and rating risks based on the risk matrix.Maintain risk register and track those related to manufacturing environments.Ensure compliance with NIST CSF, NIS 2, and other relevant frameworks.Collaborate with IT, OT, and compliance teams to align cybersecurity policies with operational requirements.Governance & Policy DevelopmentEstablish and maintain OT security governance frameworks, policies, and procedures.Define roles and responsibilities for OT security within manufacturing operations.Develop security awareness programs tailored for OT personnel, engineers, and plant operators.Provide guidance on secure architecture, network segmentation, and access controls for OT systems.Incident Response & Disaster RecoverySupport the cybersecurity incident response process, including detection, response, and recovery planning.Collaborate with IT security teams, SOC analysts, and plant personnel to investigate and mitigate security incidents.Ensure disaster recovery incorporates IT and OT system resilience and recovery.Assist manufacturing teams with the initial documentation of disaster recovery plans and assist with tabletop exercises, lessons learned and tracking updates required to current disaster recovery plans.Stakeholder Collaboration & TrainingAct as an advisor for manufacturing operations teams, and cybersecurity stakeholders.Develop training on IT and OT security risks, governance frameworks, and compliance expectations.Facilitate security awareness sessions for IT and OT engineering teams.Qualifications & ExperienceRequired:Bachelor’s degree in Cybersecurity, Information Technology, Engineering, or a related field.5+ years of experience in OT security, risk management, or governance in manufacturing, energy, or critical infrastructure.Strong knowledge of ICS/SCADA systems, industrial protocols (Modbus, OPC, DNP3, etc.), and IT and OT asset management.Experience with risk assessment methodologies, audit frameworks, and regulatory compliance.Familiarity with frameworks like NIST 800-82, IEC 62443, ISO 27001, and Purdue Model for ICS Security.Strong communication and leadership skills for cross-functional collaboration.Preferred:Industry certifications: CISM, CISSP, CRISC, GICSP, ISA 62443, or equivalent.Experience with vulnerability management, threat modeling, and incident response in manufacturing environments.Knowledge of firewalls, network segmentation, and endpoint protection for ICS environments.