HireMO

Description

The Principal Consultant specializing in Operational Technology (OT) Strategy for Industrial Cybersecurity (Senior Managing Consultant - Industrial Cybersecurity) is a senior advisory and technical leadership role responsible for helping OT-centric entities develop secure, resilient, compliant, and operationally sustainable OT environments.

This role combines deep expertise in standards such as NERC Critical Infrastructure Protection (CIP) Reliability Standards, NIST CSF, ISA 62443 and TSA Cybersecurity Directives, industrial control systems, cybersecurity architecture, utility operations, risk management, and regulatory compliance. The Principal Consultant serves as a trusted advisor to executive leadership, compliance organizations, engineering teams, cybersecurity personnel, control-room operations, and field organizations.

The successful candidate will translate regulatory requirements into practical OT strategies, architectures, governance models, implementation roadmaps, and operational controls while balancing resiliency, cybersecurity, reliability, operational safety, technology lifecycle considerations, and business objectives.

The role requires the ability to operate at both strategic and technical levels: from advising executives on multi-year OT modernization and regulatory risk to evaluating system architectures, remote-access solutions, security monitoring capabilities, control-system configurations, and audit evidence.

What You'll Do

As a Principal Consultant, you will lead strategic OT cybersecurity and regulatory compliance engagements for utility and industrial clients. You will serve as a technical leader, trusted advisor, and subject matter expert while supporting business development, mentoring staff, and helping grow 1898 & Co.'s Operational Technology Strategy and Industrial Cybersecurity practice.

Key responsibilities include, but are not limited to:

Strategy & Compliance Advisory

+ Serve as a subject matter expert in NERC CIP Reliability Standards, implementation guidance, regulatory expectations, and industry best practices.

+ Advise clients on BES Cyber System categorization, compliance applicability, scoping, and risk management strategies.

+ Develop practical compliance programs, governance structures, policies, standards, procedures, and supporting operating models.

+ Evaluate compliance gaps and develop risk-based remediation strategies that balance operational, regulatory, cybersecurity, and business considerations.

+ Support self-certifications, compliance audits, investigations, mitigation plans, and related compliance monitoring activities.

+ Advise organizations on establishing sustainable evidence management and audit readiness programs.

OT & Cybersecurity Strategy

+ Develop enterprise-wide OT cybersecurity strategies aligned with operational objectives, cybersecurity risks, and regulatory requirements.

+ Create multiyear modernization roadmaps for control systems, substations, generation facilities, EMS/SCADA environments, industrial networks, and supporting security technologies.

+ Perform OT cybersecurity assessments, architecture reviews, risk assessments, and maturity evaluations.

+ Advise clients on network architecture, segmentation, remote access, authentication, monitoring, vulnerability management, backup and recovery, and secure administration practices.

+ Develop target-state OT architectures that appropriately separate enterprise IT, operational technology, vendor access environments, and cybersecurity services.

+ Evaluate cybersecurity technologies for compatibility with operational reliability, safety, performance, and lifecycle requirements.

Governance & Program Development

+ Design and enhance cybersecurity and compliance governance frameworks, including organizational roles, responsibilities, decision rights, and oversight mechanisms.

+ Advise cybersecurity, engineering, operations, and compliance leaders on program maturity, accountability, and performance.

+ Develop policies, standards, procedures, control frameworks, RACI matrices, and compliance management processes.

+ Establish repeatable processes for regulatory change management and implementation of new requirements.

+ Support integration of cybersecurity practices across engineering, operations, compliance, risk management, legal, procurement, and vendor management functions.

Audit & Regulatory Readiness

+ Lead mock audits, readiness assessments, evidence reviews, and control validation activities.

+ Prepare executives, engineers, operators, cybersecurity personnel, and compliance teams for regulatory audits and interviews.

+ Identify control weaknesses, documentation gaps, and operational risks before formal compliance assessments.

+ Develop defensible compliance approaches supported by objective evidence and sustainable operational processes.

+ Provide guidance on the appropriate application of regulatory requirements, implementation guidance, and industry best practices.

Client & Practice Leadership

+ Lead complex consulting engagements involving multiple stakeholders, facilities, technical disciplines, and regulatory requirements.

+ Serve as an executive-level advisor for major OT cybersecurity and digital modernization initiatives.

+ Facilitate workshops and strategic planning sessions with executive leadership, engineering, operations, cybersecurity, compliance, legal, and audit organizations.

+ Develop proposals, scopes of work, implementation strategies, executive presentations, and board-level briefings.

+ Mentor consultants and technical professionals across the OT cybersecurity practice.

+ Contribute to thought leadership, service development, methodologies, and industry engagement initiatives.

+ Monitor emerging cybersecurity threats, industry technologies, operational trends, and regulatory developments affecting critical infrastructure operators.

Preferred Experience & Skills

+ Bachelor's degree in engineering, cybersecurity, information technology, computer science, industrial engineering, or a related technical discipline; equivalent industry experience may be considered.

+ Professional certifications such as CISSP, GICSP, CISM, CRISC, CISA, ISA/IEC 62443, GIAC, or similar credentials.

+ Professional Engineer (PE) license or significant electric utility engineering experience.

+ Experience supporting multiple NERC-registered entity types and working across multiple NERC regions.

+ Experience interacting directly with NERC and Regional Entities during audits, investigations, self-reports, or mitigation activities.

+ Experience implementing OT security monitoring, Security Information and Event Management (SIEM), network monitoring, or threat detection capabilities.

+ Experience supporting major OT modernization initiatives, NERC CIP program transformations, mergers and acquisitions, or large-scale network redesign efforts.

+ Knowledge of industry frameworks and standards including NIST CSF, NIST SP 800-82, ISA/IEC 62443, DOE C2M2, and related cybersecurity guidance....

Apply Externally

Jobs

Principal Consultant - Operational Technology Strategy for Industrial Cybersecurity | 1898 & Co.

Summary

You Need a MO Jobs Account First

Jobs

Jobs

Principal Consultant - Operational Technology Strategy for Industrial Cybersecurity | 1898 &amp; Co.

Summary

Do You Have a MO Jobs Account?

First, Let's Find Your MO Jobs Account

Create an Account to Apply

You Need a MO Jobs Account First

HireMO Terms of Use

1. Acceptance and Changes

2. A No-Cost Public Workforce Service

3. Eligibility, Youth, and Authority

4. Accounts and Security

5. Accuracy Attestation and Program Information

6. Job Seeker Terms

7. Employer Terms

8. Assessments and Matching

9. Artificial Intelligence Features

10. Public Records and Required Notices

11. User Content and Permissions

12. Acceptable Use

13. Intellectual Property and Government Marks

14. Other Users and Third-Party Services

15. Electronic Communications

16. Suspension, Termination, and Records

17. Disclaimers

18. Limitation of Liability and Sovereign Immunity

19. Employer Indemnification

20. Governing Law and General Terms

21. Contact, Accessibility, and Complaints

Principal Consultant - Operational Technology Strategy for Industrial Cybersecurity | 1898 & Co.