Cyber Security Architect

Utthunga is seeking a highly skilled and experienced Cyber Security Architect with a specialized focus on Industrial Automation and Control Systems (IACS). In this critical role, you will be responsible for designing, implementing, and maintaining robust security frameworks that protect vital infrastructure from evolving cyber threats. The ideal candidate will ensure stringent compliance with industry standards such as IEC 62443 and emerging regulations like EU CRA.

Key Responsibilities

• Design and architect secure solutions for Industrial Automation and Control Systems (IACS) environments, including SCADA, DCS, PLC, and other operational technology (OT) systems.
• Implement and integrate security controls and best practices into existing and new IACS architectures.
• Develop and maintain comprehensive security frameworks and policies specifically tailored for OT/ICS environments.
• Ensure rigorous compliance with industry-specific security standards and regulations, particularly IEC 62443 and EU CRA.
• Conduct security assessments, risk analyses, and vulnerability management activities for IACS.
• Provide expert guidance and recommendations on cyber security posture, incident response, and disaster recovery planning within OT.
• Collaborate with engineering, IT, and operations teams to integrate security into the full lifecycle of IACS projects.
• Stay up-to-date with the latest cyber threats, vulnerabilities, and security technologies relevant to industrial control systems.
• Develop and deliver security awareness training for personnel working with IACS.
• Evaluate and recommend security tools and technologies for protecting critical infrastructure.

Required Skills & Qualifications (Inferred)

• Proven experience as a Cyber Security Architect, with a significant focus on Industrial Control Systems (ICS) or Operational Technology (OT) environments.
• Deep understanding and practical experience with IEC 62443 standards for industrial cybersecurity.
• Familiarity with EU Cyber Resilience Act (CRA) and other relevant national/international cybersecurity regulations.
• Strong knowledge of networking protocols, operating systems, and applications commonly used in IACS.
• Experience with security technologies such as firewalls, IDS/IPS, SIEM, access control, and endpoint protection within OT/IT converged environments.
• Ability to conduct risk assessments, threat modeling, and vulnerability analysis.
• Excellent analytical, problem-solving, and communication skills.
• Relevant certifications (e.g., GICSP, GRID, CISSP, CEH) are highly desirable.
• Bachelor's or Master's degree in Computer Science, Cyber Security, Industrial Automation, Electrical Engineering, or a related field.