About The Role
The OT Cybersecurity Risk & Compliance Specialist is responsible for driving the development, implementation, and adoption of OT cybersecurity policies, standards, and guidelines aligned to the organization's enterprise risk management framework and regulatory requirements. The role performs OT cybersecurity risk assessments, supports compliance and audit activities, and collaborates with OT system owners and cross-functional stakeholders to ensure OT systems operate within acceptable levels of cyber risk.
Key Responsibilities
Governance, Policy & Compliance
- Communicate and drive adoption of OT cybersecurity policies, standards, and guidelines across stakeholders.
- Support reviews of OT cybersecurity policies based on changes in cyber threat landscape.
- Provide input to shape OT cybersecurity policies, standards, and guidelines.
- Support compliance and audit activities and track remediation.
- Report on compliance metrics across OT environments.
- Follow up on deviations and audit findings to close gaps.
- Monitor OT procedures and controls to ensure regulatory compliance.
OT Cyber Risk Assessment & Management
- Conduct OT cyber risk assessments using organisation-endorsed frameworks.
- Maintain documentation of identified OT cybersecurity risks in risk registers.
- Analyse and classify OT cyber risks and assign owners.
- Work with system owners to perform risk reviews and propose mitigation.
- Partner with stakeholders to implement corrective actions and remediation plans.
- Communicate acceptable levels of risk tolerance to stakeholders.
Collaboration & Cross-Functional Alignment
- Enhance IT–OT alignment through standardised vocabulary and collaboration.
- Support cross-team strategic initiatives and coordination activities.
- Work with stakeholders to align OT security controls with enterprise frameworks.
Required Skills & Competencies
- OT Compliance & Assurance — Level 2
- OT Cybersecurity Risk Assessment & Mitigation — Level 2
- Stakeholder Management — Level 3
- Supply Chain Management — Level 3
- Vulnerability Assessment — Level 2
- Problem Solving — Advanced
- Sense Making — Intermediate/Advanced
- Communication — Intermediate
- Digital Literacy — Advanced
Industry-Specific Experience (Required)
- Experience working in pharmaceutical manufacturing or batch chemical processing environments.
- Exposure to batch automation systems such as DCS, SCADA, MES.
- Familiarity with regulated manufacturing environments such as GMP/GxP.
- Understanding of OT change control processes used in regulated industries.
Qualification
- Education: B.E/B.Tech/Graduate
- Minimum 5-7 years experience.
