OT Cybersecurity Expert

Founded in 1976 CGI is among the worlds largest independent IT and business consulting services firms. With 94000 consultants and professionals globally CGI delivers an end-to-end portfolio of capabilities from strategic IT and business consulting to systems integration managed IT and business process services and intellectual property solutions. CGI works with clients through a local relationship model complemented by a global delivery network that helps clients digitally transform their organizations and accelerate results. CGI Fiscal 2024 reported revenue is CA$14.68billion and CGI shares are listed on the TSX (GIB.A) and the NYSE (GIB). Learn more about us .

Job Title: OT Cybersecurity Expert
Experience: 4 yrs.
Job Location: Pune
Position ID: J0926-1637
Work Type: Hybrid
Employment Type: Full Time / Permanent
Qualification: Bachelors or Masters degree in Computer Science Engineering or a related field.

Role positioning
A senior OT cybersecurity profile combining industrial systems knowledge cybersecurity expertise client advisory capability and responsibility for delivery quality.

Position Overview
CGI is looking for an experienced OT Cybersecurity Expert to support clients in protecting industrial control environments and critical operational processes. The role spans cybersecurity assessment architecture remediation incident response governance and technical advisory activities.

The successful candidate will operate at the intersection of cybersecurity industrial engineering and operational constraints. They will translate cyber risks into actionable security measures while preserving safety availability continuity and business requirements.

Core Scope
- OT / ICS SCADA DCS PLCs HMIs and industrial network environments
- Cyber Risk Architecture reviews vulnerability assessment risk analysis and remediation
- Security Architecture Segmentation zoning secure remote access network protection and defense in depth
- Standards & Regulation IEC 62443 ISO/IEC 27001 NIST guidance NIS2 LPM and relevant national guidance
- Operational Delivery Technical recommendations implementation support quality assurance and reporting

Key Responsibilities
. Assess OT/ICS environments: audit architectures and industrial systems review data flows interfaces and exposure and identify security weaknesses and attack paths.
. Identify and manage vulnerabilities: assess technical vulnerabilities and security gaps and define proportionate remediation measures adapted to industrial constraints.
. Design secure architectures: define and review OT security patterns including segmentation zones and conduits network controls access control and secure connectivity.
. Support implementation: translate recommendations into practical technical actions and support deployment or configuration of appropriate cybersecurity controls.
. Contribute to incident response: support investigation containment root cause analysis and post incident improvement activities affecting industrial environments.

Responsibilities & Expected Contribution
. OT cybersecurity governance: advise stakeholders on governance models policies risk management processes and security roadmaps for industrial environments.
. Compliance and assurance: assess alignment with IEC 62443 and other applicable cybersecurity standards regulations and security frameworks.
. Technical leadership: act as a senior reference for consultants and auditors review analyses and recommendations and validate the technical quality of deliverables.
. Delivery management: contribute to workload estimation feasibility assessment activity planning quality control and reporting for cybersecurity activities.
. Training and awareness: explain OT cyber risks and security practices to technical and non-technical stakeholders and contribute to team capability building.
. Innovation and continuous improvement: contribute to R&D technical watch methodologies tools and new cybersecurity services for industrial environments.
. Business development support: help shape and extend OT cybersecurity services capabilities and propositions beyond existing engagements and technologies.

Technical expertise
. Strong understanding of OT/ICS architectures and technologies including SCADA DCS PLCs and HMIs.
. Good knowledge of industrial network architectures segmentation and security controls.
. Knowledge of industrial protocols such as Modbus OPC / OPC UA Profinet and DNP3 is an advantage.
. Strong familiarity with cybersecurity standards and frameworks particularly IEC 62443 as well as ISO/IEC 27001 NIST guidance NIS2 LPM and applicable national guidance.
. Ability to understand vulnerabilities attack scenarios and risk implications in industrial environments and translate them into actionable recommendations.

Professional capabilities
. Autonomous structured and comfortable handling technically complex topics.
. Able to communicate with engineering operations IT cybersecurity and management stakeholders.
. Strong analytical synthesis and technical writing skills.
. Able to lead workshops present findings and defend pragmatic recommendations.
. Fluent professional English written and spoken
. Certifications related to industrial cybersecurity OT security risk management or security architecture are valued for example IEC 62443 related training/certification GICSP CISSP CISM or equivalent credentials.

Education & experience
. Engineering degree university degree or equivalent qualification in cybersecurity computer science industrial systems automation or a related discipline.
. At least 3 years of professional experience in industrial cybersecurity / OT cybersecurity.
. Experience working with complex operational environments and the constraints associated with safety availability legacy technologies and production continuity.

Expected Seniority & Success Criteria
- Technical depth Provides credible hands on OT cybersecurity expertise and produces technically sound recommendations.
- Pragmatism Balances cybersecurity requirements with industrial safety availability legacy and operational constraints.
- Delivery quality Ensures complete actionable and high quality outputs and contributes to reliable planning and reporting.
- Stakeholder leadership Builds trust with technical and business stakeholders and communicates clearly across disciplines.
- Continuous improvement Turns lessons learned incidents and field experience into improved methods architectures and services.

Key Skills at a Glance
- OT / ICS cybersecurity IEC 62443 Security architecture
- OT risk assessment SCADA / DCS / PLC Industrial networks
- Vulnerability management Incident response IT/OT segmentation
- Governance & compliance NIS2 / LPM / ANSSI Technical leadership

CGI is an equal opportunity addition CGI is committed to providing accommodation for people with disabilities in accordance with provincial legislation. Please let us know if you require reasonable accommodation due to a disability during any aspect of the recruitment process and we will work with you to address your needs.

#LI-GB9

• Communication
• Cyber Security Strategy
• Problem Solving
• Risk analysis
• Safety

Together as owners lets turn meaningful insights into action.

Life at CGI is rooted in ownership teamwork respect and belonging. Here youll reach your full potential because

You are invited to be an owner from day 1 as we work together to bring our Dream to life. Thats why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our companys strategy and direction.

Your work creates value. Youll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas embrace new opportunities and benefit from expansive industry and technology expertise.

Youll shape your career by joining a company built to grow and last. Youll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

That same commitment to fairness extends to how we use technology. To support our recruitment team AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.

Come join our teamone of the largest IT and business consulting services firms in the world.