Principal Consultant - Operational Technology Strategy for Industrial Cybersecurity | 1898 & Co.
- Compensation
- Not disclosed
- Location
- Multiple Locations
- Work setup
- Not specified
- Seniority
- Principal
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Nice to have
- Bachelor's degree in engineering, cybersecurity, information technology, computer science, industrial engineering, or a related technical discipline; equivalent industry experience may be considered.
- Professional certifications such as CISSP, GICSP, CISM, CRISC, CISA, ISA/IEC 62443, GIAC, or similar credentials.
- Professional Engineer (PE) license or significant electric utility engineering experience.
- Experience supporting multiple NERC-registered entity types and working across multiple NERC regions.
- Experience interacting directly with NERC and Regional Entities during audits, investigations, self-reports, or mitigation activities.
- Experience implementing OT security monitoring, Security Information and Event Management (SIEM), network monitoring, or threat detection capabilities.
- Experience supporting major OT modernization initiatives, NERC CIP program transformations, mergers and acquisitions, or large-scale network redesign efforts.
- Knowledge of industry frameworks and standards including NIST CSF, NIST SP 800-82, ISA/IEC 62443, DOE C2M2, and related cybersecurity guidance.
- Experience in executive consulting, client development, practice growth, and mentoring senior technical staff.
- Ten or more years of experience in operational technology, industrial control systems, cybersecurity, regulatory compliance, utility operations, engineering, or consulting.
- Seven or more years of direct experience supporting NERC Reliability Standards and NERC CIP compliance programs.
- Demonstrated expertise in NERC CIP compliance, audit readiness, regulatory interpretation, governance development, and compliance program implementation.
- Experience working in utility OT environments, including EMS/SCADA, generation facilities, substations, industrial networks, control systems, or related infrastructure.
- Strong understanding of OT cybersecurity architecture, industrial networking, segmentation, remote access, authentication, monitoring, logging, vulnerability management, and recovery strategies.
- Experience leading complex technical, compliance, or transformation initiatives involving cross-functional stakeholders.
- Strong written, verbal, and presentation skills with the ability to communicate complex technical and regulatory concepts to audiences ranging from executives to technical practitioners.
Full description
The Principal Consultant specializing in Operational Technology (OT) Strategy for Industrial Cybersecurity (Senior Managing Consultant – Industrial Cybersecurity) is a senior advisory and technical leadership role responsible for helping OT-centric entities develop secure, resilient, compliant, and operationally sustainable OT environments.
This role combines deep expertise in standards such as NERC Critical Infrastructure Protection (CIP) Reliability Standards, NIST CSF, ISA 62443 and TSA Cybersecurity Directives, industrial control systems, cybersecurity architecture, utility operations, risk management, and regulatory compliance. The Principal Consultant serves as a trusted advisor to executive leadership, compliance organizations, engineering teams, cybersecurity personnel, control-room operations, and field organizations.
The successful candidate will translate regulatory requirements into practical OT strategies, architectures, governance models, implementation roadmaps, and operational controls while balancing resiliency, cybersecurity, reliability, operational safety, technology lifecycle considerations, and business objectives.
The role requires the ability to operate at both strategic and technical levels\: from advising executives on multi-year OT modernization and regulatory risk to evaluating system architectures, remote-access solutions, security monitoring capabilities, control-system configurations, and audit evidence.
What You’ll Do
As a Principal Consultant, you will lead strategic OT cybersecurity and regulatory compliance engagements for utility and industrial clients. You will serve as a technical leader, trusted advisor, and subject matter expert while supporting business development, mentoring staff, and helping grow 1898 & Co.'s Operational Technology Strategy and Industrial Cybersecurity practice.
Key responsibilities include, but are not limited to\:
Strategy & Compliance Advisory
- Serve as a subject matter expert in NERC CIP Reliability Standards, implementation guidance, regulatory expectations, and industry best practices.
- Advise clients on BES Cyber System categorization, compliance applicability, scoping, and risk management strategies.
- Develop practical compliance programs, governance structures, policies, standards, procedures, and supporting operating models.
- Evaluate compliance gaps and develop risk-based remediation strategies that balance operational, regulatory, cybersecurity, and business considerations.
- Support self-certifications, compliance audits, investigations, mitigation plans, and related compliance monitoring activities.
- Advise organizations on establishing sustainable evidence management and audit readiness programs.
OT & Cybersecurity Strategy