About The Role

The OT Cybersecurity Risk & Compliance Specialist is responsible for driving the development, implementation, and adoption of OT cybersecurity policies, standards, and guidelines aligned to the organization's enterprise risk management framework and regulatory requirements. The role performs OT cybersecurity risk assessments, supports compliance and audit activities, and collaborates with OT system owners and cross-functional stakeholders to ensure OT systems operate within acceptable levels of cyber risk.

Key Responsibilities

Governance, Policy & Compliance

Communicate and drive adoption of OT cybersecurity policies, standards, and guidelines across stakeholders.
Support reviews of OT cybersecurity policies based on changes in cyber threat landscape.
Provide input to shape OT cybersecurity policies, standards, and guidelines.
Support compliance and audit activities and track remediation.
Report on compliance metrics across OT environments.
Follow up on deviations and audit findings to close gaps.
Monitor OT procedures and controls to ensure regulatory compliance.

OT Cyber Risk Assessment & Management

Conduct OT cyber risk assessments using organisation-endorsed frameworks.
Maintain documentation of identified OT cybersecurity risks in risk registers.
Analyse and classify OT cyber risks and assign owners.
Work with system owners to perform risk reviews and propose mitigation.
Partner with stakeholders to implement corrective actions and remediation plans.
Communicate acceptable levels of risk tolerance to stakeholders.

Collaboration & Cross-Functional Alignment

Enhance IT–OT alignment through standardised vocabulary and collaboration.
Support cross-team strategic initiatives and coordination activities.
Work with stakeholders to align OT security controls with enterprise frameworks.

Required Skills & Competencies

OT Compliance & Assurance — Level 2
OT Cybersecurity Risk Assessment & Mitigation — Level 2
Stakeholder Management — Level 3
Supply Chain Management — Level 3
Vulnerability Assessment — Level 2
Problem Solving — Advanced
Sense Making — Intermediate/Advanced
Communication — Intermediate
Digital Literacy — Advanced

Industry-Specific Experience (Required)

Experience working in pharmaceutical manufacturing or batch chemical processing environments.
Exposure to batch automation systems such as DCS, SCADA, MES.
Familiarity with regulated manufacturing environments such as GMP/GxP.
Understanding of OT change control processes used in regulated industries.

Qualification

Education: B.E/B.Tech/Graduate
Minimum 5-7 years experience.

Security Engineer III - OT Cybersecurity Risk & Compliance Specialist