What are the responsibilities and job description for the OT/ICS Security Lead position at Rivago Infotech Inc?
About the position
- Lead and execute OT/ICS cybersecurity activities across multiple industrial sites ( customer sites)
- Focus on industrial security assessment, segmentation, and risk reduction
- Ensure OT environments are:
- Secure
- Stable
- Aligned to IEC 62443 and NIST standards
- Work closely with plant operations, engineering teams, and IT security teams
- Deliver practical, implementable solutions without impacting production
What you’ll do
Key Responsibilities
1. OT/ICS Security Assessment
- Site visit and Conduct end-to-end OT security assessments across plants / operational sites ( apprx.10 sites)
- Perform:
- Asset discovery (PLCs, SCADA, HMI, network devices)
- Network architecture reviews
- Vulnerability identification
- Identify:
- Control gaps
- Exposures and attack surfaces
- Legacy system risks
- Perform gap analysis aligned to IEC 62443 / NIST SP 800-82 frameworks
- Deliver:
- OT baseline reports
- Risk findings and recommendations
2. OT Network Architecture & Segmentation
- Design OT network segmentation using Purdue Model (zones & conduits)
- Define:
- IT–OT DMZ architecture
- Secure communication pathways
- Trust boundaries between systems
- Recommend:
- Firewall placement
- Network isolation strategies
- Ensure:
- Industrial safety is not impacted
- uptime and operational continuity are maintained
3. Industrial Cyber Risk Management
- Identify risks across:
- PLCs
- SCADA systems
- Industrial protocols
- Vendor remote access
- Analyze:
- Operational impact
- Safety risks
- Business criticality
- Maintain and update:
- OT risk register
- Risk prioritization matrix
- Provide:
- Risk mitigation strategies
- Residual risk recommendations
4. Security Controls & Hardening
- Define and recommend OT-specific security controls, including:
- Network segmentation
- Access control (RBAC, vendor access)
- Monitoring & logging
- Design compensating controls for:
- Legacy PLC/SCADA systems
- Systems that cannot support endpoint agents
- Ensure controls are:
- Practical
- Deployable with minimal disruption
5. OT Monitoring & Threat Detection
- Deploy and tune OT monitoring tools:
- Claroty
- Nozomi
- Dragos
- Perform:
- Network traffic analysis
- Protocol-level inspection
- Detect:
- Anomalies
- Lateral movement risks
- Unauthorized access
- Integrate OT monitoring insights with IT security systems where feasible
6. Remediation & Technical Debt Reduction
- Develop OT remediation roadmap based on findings
- Define:
- Short-term mitigations
- Long-term improvements
- Track:
- Remediation actions
- Owners and timelines
- Support:
- Technical debt reduction
- Migration to secure baseline architecture
7. Site-Level Engagement & Coordination
- Work closely with:
- Plant managers
- OT engineers
- Maintenance and automation teams
- Align security solutions with:
- Operational processes
- Maintenance windows
- Safety requirements
- Conduct:
- Workshops
- Site walkthroughs
- Stakeholder discussions
8. Industrial Security Standards & Compliance
- Ensure alignment with:
- IEC 62443
- NIST SP 800-82
- Support:
- Compliance assessments
- Audit readiness
- Map controls to:
- Industry standards
- Organizational security baselines
Key Deliverables
- OT asset discovery and baseline report
- Industrial risk assessment and mitigation plan
- Purdue-based segmentation design
- Security control recommendations
- Remediation roadmap and tracking
- Reduced OT cybersecurity risk across sites
What you’ll bring
Core OT Security Skills
- Hands-on experience with:
- PLC, SCADA, DCS, ICS systems
- Strong knowledge of:
- Industrial network protocols
- OT attack vectors and threats
Technical Expertise
- Frameworks:
- IEC 62443
- NIST CSF / SP 800-82
- Architecture:
- Purdue Model
- Zone–conduit segmentation
- Tools:
- Armis / Claroty / Nozomi / Dragos
- OT monitoring & network visibility tools
Industrial Domain Knowledge
- Experience in:
- Healthcare / pharma /
- Manufacturing / process plants
- Understanding of:
- Safety systems
- Production-critical operations
Soft & Functional Skills
- Strong problem-solving and analytical thinking
- Ability to work with cross-functional OT IT teams
- Strong communication skills for:
- Technical and non-technical stakeholders
Preferred Certifications
- GICSP (Global Industrial Cyber Security Professional)
- ISA/IEC 62443 Certification
- CISSP / CISM (optional but beneficial)