Power and Utilities OT Operational Technology-Senior Consultant

Work you'll do

• Identify and evaluate complex business and technology risks
• Develop remediation methods to mitigate risks
• Demonstrate problem solving, critical thinking and logical structuring skills
• Aid in the selection and tailoring of approaches, methods and tools to support service offerings or industry projects
• Participate actively in decision making with engagement management and seek to understand the broader impact of current decisions
• Facilitate the use of technology-based tools or methodologies to review, design and/or implement products and services
• Identify opportunities to improve engagement profitability and manage engagement economics
• Withhold the ability to identify and address client needs: building solid relationships with clients; developing an awareness of Firm services; communicating with the client in an organized and knowledgeable manner; delivering clear requests for information; demonstrating flexibility in prioritizing and completing tasks; and communicating potential conflicts to the manager
• Show a general knowledge of market trends, competitor activities, Deloitte Advisory products and service lines

Required Skills

• 5+ years of demonstrate advanced understanding and experience governing and implementing power and utility regulations and standards including: North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP), NERC Operations and Planning (O&P), Federal Energy Regulatory Commission, Transportation Security Administration (TSA) Cybersecurity, IEC 62443 standard - Securing Industrial Automation and Control Systems (IACS), Nuclear Energy Institute (NEI) - NEI 08-09, 10 CFR 73.545
• 5+ years of demonstrate advanced understanding and cyber risk management in at least two of the following areas: SCADA with experience in securing ICS (Industrial Control Systems) security, Internet of Things (IOT) architecture and security, OT (Operational Technology) security, NERC CIP-015 - Internal Network Security Monitoring (INMS), Embedded systems security, OT network segmentation (zones/conduits), jump hosts, secure remote access
• 5+ years of demonstrate advanced understanding of business processes and cyber risk management in an OT / SCADA environment in two or more areas such as: Cyber security, Secure Supply Chain, Security Analytics, Security Operations Centers, Vulnerability and Threat Management, Data Security, Secure Dev Ops, Business continuity management
• Familiarity with industry standards and regulatory requirements around cyber risk management (e.g., ISO 27001, IEC 62443, NIST CSF)
• 5+ years implementing security solutions
• BA/BS in cyber security, information security, engineering, computer science, information technology, information management, information sciences, business administration, or related field preferred
• CISSP, CISM, or CISA certification a plus

Additional Requirements

• Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve
• Limited sponsorship opportunities may be available

Locations

• Houston
• Dallas
• Cleveland
• Detroit
• St. Louis
• Pittsburgh
• Boston
• Charlotte
• Atlanta
• Miami
• Memphis
• Denver
• Phoenix
• Salt Lake City
• Los Angeles
• San Diego
• San Francisco
• Seattle

Preferred

• Minimum of 2 years working in an OT environment (e.g., OT security, ICS security, IOT security, SCADA, etc.)
• Minimum 2 years designing security for infrastructure, network and application architectures
• Experience in the Power Utilities & Renewables, Oil & Gas, or Industrial Products & Construction sector
• Demonstrated experience working with cloud platforms (AWS, Azure)

Wage Range

Reasonable estimate of the current range is $105,400 to $207,800.

Discretionary Annual Incentive Program

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.