West Monroe is seeking a Cybersecurity Architect with relevant experience in securing Operational Technology (OT), Process Control Networks (PCN), and/or Industrial Control Systems (ICS). We’re looking for a thought leader and hands-on technologist to join our world-class Cybersecurity Practice and advise clients within the Energy & Utilities (E&U) and Consumer & Industrial Products (C&IP) verticals on how to enhance the resiliency of their critical technology infrastructures. The architect will also assist practice leadership across Technology, E&U, and C&IP teams in setting the direction of our firm’s Critical Infrastructure security offerings.

Responsibilities:

• Serve as part of an integrated team of cybersecurity, C&IP, and E&U consultants with the goal of expanding the firm’s Critical Infrastructure security capabilities
• Speak to the security landscape, architectural models, and solutions credibility when presenting technical OT, PCN, and/or ICS security solutions to senior executives
• Consult with clients and act as SME in the secure design of critical infrastructure environments, including:
  • Manage information security programs across E&U and C&IP verticals
  • Promote thought leadership in emerging OT, PCN, and ICS technologies
  • Lead cybersecurity risk/compliance assessments and develop security documentation
  • Select, design, and implement cybersecurity monitoring and incident response solutions
  • Provide independent review of risk, compliance, and security frameworks in support of the OT environment
• Translate business/technical requirements into project proposals, including detailed work plans and cost estimates
• Manage security strategy, budget, and success of risk and regulatory programs at our clients
• Coach and develop members of the Cybersecurity Practice area and junior E&U cyber specialists
• Assist sales efforts by supporting initial scoping conversations and performing needs analyses to help drive business development efforts

Qualifications:

• Bachelor’s degree in relevant field preferred, or equivalent experience required
• Consulting firm/industry experience preferred
• 7-15+ years of professional experience ideally with a focus on helping organizations define, develop, deploy, and manage cybersecurity solutions across Critical Infrastructure environments (OT, PCN, ICS, etc.)
• Experience supporting any of the following: SCADA systems, PLC, RTU, DCS, SIS, MES, Historians, HMI
• Fundamental understanding of Windows/UNIX platforms and IT/OT network communication protocols, I.e. TCP/IP, UDP, DNP3, Modbus, IEC 61850, OPC, OPC UA, HART, Foundation Fieldbus, PROFINET
• Well-versed in industrial control regulations – NERC CIP, NIST SP 800-82, IEC 62443
• Confident in leading end-to-end solutions – strategy, design, development, testing, training, implementation
• Proficient in deploying/supporting a variety of cybersecurity practices and technologies, I.e. risk assessments, compliance assessments, vulnerability assessments, antivirus software, firewalls, IDS/IPS, deep packet inspection, SIEM, centralized alert logging/monitoring in ICS environments
• Confident in working with senior stakeholders to understand business objectives and identify risk factors
• Adept organizational and communication skills (written, verbal, presentation, facilitation)
• Ability to convey complex security concepts to executive-level leaders
• Comfortable speaking to both technical and non-technical audiences from the plant floor up to the boardroom
• Willingness to travel for out of town client engagements - COVID-19 permitting