The Consulting business at KPMG Global Services (KGS) is a diverse team of more than 6400 professionals. We work with KPMG Firms worldwide to transform the businesses of clients across industries through the latest technology and innovation. Our technology professionals combine deep industry knowledge with strong technical experience to navigate through complex challenges and deliver real value for our clients.
Through your work, you’ll build a global network and unlock opportunities that you may not have thought possible with access to great support, vast resources, and an inclusive, supportive environment to help you reach your full potential.
Job details
•Proposed designation
ACon/Con - OT Security
•Role type
Individual contributor
•Reporting to
Manager/ Associate Director/Director
•Geo to be supported
US / UK
•Work timings
General / Shifts
Roles & responsibilities
•Support ICS/OT Cyber Security engagements including maturity assessments, security reviews, gap assessments, and transformation initiatives.
•Assess client OT security controls against industry-recognized frameworks such as IEC 62443, NIST 800-82, and NIST CSF.
•Perform security control gap analysis and contribute to remediation roadmaps and improvement recommendations.
•Support the design and implementation of OT security solutions across industrial and critical infrastructure environments.
•Gather, analyze, and document client requirements, current-state architectures, and security challenges.
•Assist in preparing assessment reports, security recommendations, and client deliverables.
•Support workshops, interviews, and stakeholder discussions during OT security engagements.
•Apply knowledge of ICS/OT/IoT security technologies and operational environments to address cybersecurity risks and security gaps.
•Work collaboratively with project teams to deliver OT security solutions, assessments, and consulting engagements.
This role is for you if you have the below
Educational qualifications
•Bachelor's degree from an accredited college/university or equivalent experience
•Preferred certifications include one or more of the following: IEC 62443, GICSP, Security+, CEH, CISA, CISSP, or equivalent OT security certifications..
Work experience
•Minimum 3 years of Experience in cyber security for Operational Technology environment
•Experience supporting OT security assessments, architecture reviews, security implementations, or governance activities.
•Experience working with industrial environments such as Manufacturing, Energy, Utilities, Oil & Gas, Transportation, or Critical Infrastructure is preferred.
•Client-facing experience and consulting exposure preferred
Mandatory technical & functional skills
•Good understanding of OT architectures, Purdue Model, PLCs, SCADA, DCS, and industrial communication protocols including OPC, Modbus, IEC 60870, and DNP3.
•Working knowledge of OT security frameworks and standards including IEC 62443, NIST 800-82, and NIST CSF.
•Hands-on experience or exposure to OT security technologies such as Nozomi, Claroty, Armis, Dragos, and ServiceNow.
•Understanding of industrial environments, operational processes, and OT asset architectures.
•Knowledge of OT endpoints, industrial servers, embedded systems, and networked control systems.
•Knowledge of security monitoring, vulnerability management, asset management, logging, and OT security operations tools.
•Understanding of network segmentation, firewalls, IDS/IPS technologies, and OT security controls.
•Strong analytical, documentation, and communication skills.
Key behavioral attributes/requirements
•Experience working in a consulting environment or with Big4 firms
•Demonstrated analytical and complex problem-solving skills
•Ability to work effectively in a team and across functions, partnering with other teams globally
•Very strong work ethic and ability to deal with confidential information
•Develop people through effective coaching and mentoring.
•Strong interpersonal skills.