Operational Technology Cybersecurity Consultant

Transit Safety & Security Solutions Inc provides operational technology (OT) cybersecurity consulting on an as-needed, project-based basis for organizations focused on keeping critical systems secure and dependable. In this contract role (onsite in the United States), Operational Technology Cybersecurity Consultant(s) help identify, assess, and reduce cybersecurity risks across OT, Enterprise Control Systems (ECS), and associated IT/OT environments. The work supports improved security and resilience while maintaining operational availability, safety, and reliability.

Responsibilities

• Conduct cybersecurity risk assessments of OT, ICS, SCADA, networks, and related IT/OT environments.
• Identify cybersecurity vulnerabilities, threats, control deficiencies, and operational risks, then recommend mitigation strategies aligned to OT realities.
• Lead or support gap assessments, maturity assessments, vulnerability assessments, and security-control reviews.
• Support implementation and assessment of cybersecurity frameworks and standards, including NIST Cybersecurity Framework (CSF), NIST SP 800-82, NIST SP 800-53, and ISA/IEC 62443, along with other regulatory or client requirements.
• Provide FTA, FRA, and other sector-specific guidance where applicable.
• Develop risk registers, prioritized remediation plans, and recommendations tailored to the client’s OT environment and tolerance for operational disruption.
• Prepare assessment reports, technical memoranda, risk analyses, findings, recommendations, and executive-level presentations.
• Support cybersecurity requirements across the system development and project lifecycle.
• Coordinate with system engineers, IT personnel, operations staff, vendors, contractors, and client cybersecurity teams.
• Perform OT cybersecurity architecture and design reviews for existing systems and new projects.
• Review or advise on OT network architecture, zoning, and conduits.
• Evaluate network segmentation, remote access, authentication, asset management, monitoring, logging, patch management, vulnerability management, and incident-response capabilities.
• Recommend and advise on hardening of OT assets and supporting infrastructure, including secure baselines and patching strategies that respect safety and operations constraints.
• Assist with OT/ICS cybersecurity asset inventories, system categorization, risk registers, and remediation plans.
• Provide guidance on secure remote access and vendor connectivity, OT operator and engineer access management, and monitoring/logging integration with SOC/SIEM for OT events.
• Review system designs, specifications, network diagrams, cybersecurity documentation, vendor submissions, and technical requirements.
• Collaborate on and evaluate third-party and supply-chain cybersecurity risks tied to OT systems, vendors, and equipment.
• Help clients develop and implement cybersecurity programs, policies, standards, procedures, and technical controls.
• Develop cybersecurity requirements for procurements, contracts, system implementations, upgrades, and capital projects.
• Advise on alignment with applicable cybersecurity and privacy laws and regulations, including state breach-notification laws and sector-specific requirements.
• Support contractual and insurance-driven cybersecurity obligations where relevant.
• Participate in client meetings, workshops, technical reviews, audits, and cybersecurity compliance activities.
• Assist with OT incident-response and recovery procedures and support tabletop exercises when required.
• Track identified vulnerabilities and cybersecurity risks through remediation and closure.
• Maintain awareness of emerging OT cybersecurity threats, vulnerabilities, attack techniques, technologies, regulatory requirements, and industry best practices.
• Develop OT playbooks and incident severity classification for OT assets.
• Provide incident containment consulting to triage and identify attack vectors, recommend immediate containment/mitigation steps (subject to client operational and safety constraints), and coordinate with internal teams and third-party responders.
• Develop and deliver remote training content for OT engineers and maintenance personnel, control room operators, and management and executive stakeholders.
• Perform additional cybersecurity consulting duties as assigned based on project and client requirements.

Technologies

• NIST Cybersecurity Framework (CSF)
• NIST SP 800-82
• NIST SP 800-53
• ISA/IEC 62443
• SOC/SIEM

Engagement Summary

• Provide cybersecurity consulting, assessment, risk management, and technical advisory services for OT, ECS, and associated IT environments on an as-needed, project-based basis.
• Identify, assess, and mitigate cybersecurity risks affecting critical operational systems and infrastructure.
• Work with engineering, information technology, cybersecurity, safety, operations, project management, and client stakeholders to improve OT security and resilience while maintaining safety and reliability.
• May support the company’s communications infrastructure, SCADA systems, and other critical infrastructure.

Scope of Services: Services may be engaged depending on statements of work or project assignments.