Job Description

OT Security Manager

Location: Katowice - 2 days office / 3 days remote

Let us introduce you the job offer by EY GDS Poland – a member of the global integrated service delivery center network by EY.

The opportunity

The GDS Cyber Architecture Operational Technology & Engineering (CAOE) team helps organizations secure their Operational Technology (OT) and Industrial Control System (ICS) environments against evolving cyber threats. We work with clients across critical infrastructure, manufacturing, energy, utilities, and other industrial sectors to strengthen the security, resilience, and reliability of their OT operations.

Our services combine industry-leading practices, people, processes, and technology to help clients assess risks, improve security governance, enhance visibility into industrial environments, and implement effective OT cybersecurity solutions aligned with standards such as IEC 62443, NIST 800-82, and NIS2.

We are looking for professionals who will play an active role in delivering OT cybersecurity engagements, supporting business development activities, and designing and implementing innovative security solutions for industrial environments. In this role, you will work closely with global clients to protect critical OT assets, industrial networks, and control systems through both advisory and hands-on implementation services.

You will have the opportunity to support a wide range of OT security initiatives, including OT security assessments, architecture reviews, network segmentation, industrial security monitoring, compliance programs, cyber risk management, and the deployment of OT security technologies. As a Senior Consultant, you will contribute directly to helping organizations build secure, resilient, and future-ready IT/OT environments.

Skills and attributes for success

• Strong understanding of cybersecurity principles, risk management, security controls, and governance frameworks, with the ability to assess and mitigate cyber risks across complex IT and OT environments.
• Strong knowledge of Operational Technology (OT) and Industrial Control System (ICS) security standards and frameworks, including ISA/IEC 62443, NIST SP 800-82, NERC CIP, and the NIS2 Directive.
• Strong understanding of OT and industrial network architectures, including industrial communication protocols, network segmentation strategies, Secure Remote Access solutions, and security technologies used to protect critical infrastructure environments.
• Strong knowledge of networking fundamentals, including TCP/IP, the OSI model, routing, switching, network troubleshooting, firewalls, IDS/IPS, and related security technologies.
• Strong understanding of security-related operational processes and controls in OT environments, including asset management, vulnerability management, patch management, change management, incident response, and security monitoring.
• Proven knowledge of cyber threats, attack vectors, and vulnerabilities affecting OT/ICS environments, including industrial control systems, operational networks, operating systems, and OT-specific devices and technologies.
• Experience conducting cybersecurity and risk assessments, including OT security assessments, security maturity reviews, architecture assessments, gap analyses, and compliance evaluations against industry standards and regulatory requirements.
• Ability to identify security risks and provide practical remediation recommendations to improve the security posture and resilience of industrial and critical infrastructure environments.

To qualify for the role, you must have

• 8+ years of experience in Cyber Security or OT Security Domain
• Certifications: GICSP, CCNA, CISSP, CISA, CISM or equivalent (technology-based)
• C1 level English proficiency (fluent or native), with strong verbal and written communication skills required for working in international client-facing environments.
• The ability to effectively leverage AI tools and technologies to enhance productivity, research, analysis, documentation, and OT cybersecurity consulting activities
• Open to candidates willing to relocate to Katowice

Ideally, you’ll also have

• Prior experience working alongside delivery leads and architects to Identify and manage risks.
• Understanding of technologies (typical assets, communication protocols, technical architectures) utilized by OT-ICS systems and networks.
• Knowledge of the technical security solutions utilized within IT and OT systems and networks.
• Knowledge on Firewall and switch configuration.
• Knowledge on new technologies such as the Internet of Things (IoT), Operational Technology Threats is a definite plus.
• Threat Identification and monitoring tools used along with SIEM solutions such as Nozomi Networks, Claroty, Microsoft Sentinel
• Exposure/hands-on to IT/OT monitoring solutions (Claroty, Nozomi Networks, Armis, Azure IoT Defender etc).
• Knowledge of standards such as ISO 27001/2, ISO 22301, ISO 27018, PCI – DSS, NIST standards on Cyber Security, HITRUST, etc. is a plus.

What we offer

EY Global Delivery Services (GDS) is a dynamic and truly global delivery network. We work across nine locations – Argentina, Hungary, India, the Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom – and with teams from all EY service lines, geographies and sectors, playing a vital role in the delivery of the EY growth strategy. From accountants to coders to advisory consultants, we offer a wide variety of fulfilling career opportunities that span all business disciplines. In GDS, you will collaborate with EY teams on exciting projects and work with well-known brands from across the globe. We’ll introduce you to an ever-expanding ecosystem of people, learning, skills and insights that will stay with you throughout your career.

• Continuous learning You’ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership We’ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.

About EY

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

If you can demonstrate that you meet the criteria above, please contact us as soon as possible.

The exceptional EY experience. It’s yours to build.

In compliance with the requirements of the Whistleblower Protection Act, our company has established the Procedure for reporting breaches of law and undertaking appropriate follow-up actions Any misconduct should be reported through the EY Ethics Hotline.