OT SECURITY ANALYST (EL)

Role overview

Work model

• The stated work model is onsite / hybrid.
• The qualifications also describe a primarily remote engagement model.

Main accountabilities

• Facilitate OT device onboarding to Nozomi and Claroty IDS platforms and maintain OT security modules in ServiceNow.
• Generate and analyze vulnerability reports, coordinate remediation, validate fixes, track closure, and escalate critical vulnerabilities.
• Maintain OT asset inventories and visibility across IDS platforms and ServiceNow; resolve asset-data gaps.
• Support OT security assessments, compliance checks, and audits; help prepare factory teams and document findings and recommendations.
• Provide weekly progress and risk updates and maintain monthly dashboards, documentation, remediation plans, and milestone tracking.
• Liaise with global OT security, country IS teams, and factory operations; coordinate meetings and workshops across locations and time zones.
• Improve engagement and reporting processes and contribute to OT security procedures and factory engagement playbooks.
• Follow ABB regulations, IS guidelines, security policies, and data privacy requirements; maintain audit readiness.

Qualifications

• Bachelor's or Master's degree in IT, Computer Science, Electrical/Control Engineering, Cybersecurity, or a related field.
• At least 5 years in OT/ICS security or industrial cybersecurity and at least 3 years of practical experience with Nozomi or Claroty OT IDS platforms.
• Experience with ServiceNow, OT/ICS vulnerability management, and OT security programs in manufacturing or other industrial settings.
• Experience working across countries and cultures in a global organization.
• Knowledge of ISA/IEC 62443, NIST CSF, NIST SP 800-82, OT/ICS architectures, the Purdue Model, industrial protocols, IT/OT convergence, ABB IS policies, and ISO 27001.
• Strong analytical, problem-solving, written and verbal communication, reporting, and stakeholder-engagement abilities; able to handle confidential information.

Certifications and SFIA skills

• Listed certifications include GICSP, CSSA, ISA/IEC 62443 Cybersecurity Certificate Program, CompTIA Security+ or equivalent, ISO 27001 Lead Implementer or Lead Auditor, and Nozomi or Claroty platform certifications.
• SFIA skills listed include Information Security, Compliance Management, Vulnerability Assessment, Relationship Management, Incident Management, Specialist Advice, Asset Management, Emerging Technology Monitoring, Security Administration, and Performance Management.

About ABB Electrification