Required Qualifications
- Training and/or experience with OT/ICS and SCADA systems.
- Knowledge of ICS/OT, SCADA vulnerability analysis, and risk management.
- Knowledge and awareness of critical infrastructure risks and mitigation best practices.
- Experience with any of the following ICS/OT security compliance frameworks
- Cybersecurity Capability Maturity Model (C2M2).
- U.S. Department of Homeland Security Cross-Sector Cybersecurity Performance Goals (DHS CPG).
- North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP).
- National Institute of Standards and Technology Cybersecurity Framework (NIST CSF).
- SANS ICS Five Critical Controls.
- NIST 800-82 Guide to Operational Technology (OT) Security.
- European Union Agency for Cybersecurity Guide to Protecting Industrial Control Systems (EU).
- International Society of Automation/International Electrotechnical Commission 62443 (ISA/IEC 62443).
- Skills across multiple cybersecurity domains and the assessment of risk.
- Ability to understand the root causes of vulnerabilities and to articulate those in written and verbal communications to clients.
- Knowledge of and experience with the implementation and validation of security controls and security governance.
- Experience with NIST 800-30 style risk assessments and organizational cybersecurity maturity assessments.
- Ability to participate and collaborate in the business development and sales process by assisting with project proposals, presentations, and new client activities.
- Willingness to seek knowledge and expertise through professional development within your specialty and to follow up with action to improve quality and establish best practices.
- Ability to foster strong relationships with clients.
Preferred/Desired Qualifications
- Experience with OT/ICS security compliance assessments.
- Certifications and/or experience specific to OT/ICS security controls and risk management.
- Certified information systems security professional (CISSP) certification, or equivalent.
Education and Experience
- A bachelor’s degree in cybersecurity or a related field of study and eight years of relevant experience. An equivalent combination of advanced education, training, and experience will be considered.
GENESYS Consulting Services, Inc. is proud to be an equal-opportunity employer.