P

Parsons

Digital infrastructure and security solutions provider

OT Cybersecurity Consultant

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-time$74k - $137.5k

About the Job

Requirements

  • Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Information Technology, Engineering, or a related field.
  • At least 3 years of relevant experience in cybersecurity, technology risk, IT audit, OT/industrial cybersecurity, compliance, engineering technology environments, or consulting.
  • Foundational understanding of cybersecurity and risk management across enterprise IT and OT environments.
  • Familiarity with one or more of NIST CSF, ISO 27001, CIS Controls, ISA/IEC 62443, or NIST SP 800-82.
  • Basic understanding of OT/industrial concepts, including ICS/SCADA components, plant networks, industrial protocols, connected devices, and operational constraints.
  • Strong writing and presentation skills to produce client-ready deliverables.
  • Strong analytical and problem-solving skills with attention to detail.
  • Proficiency in Microsoft Excel, Word, PowerPoint, and Visio.
  • Willingness to travel to client sites and operational facilities.

Responsibilities

  • Support delivery of cybersecurity advisory, technology risk, and OT cybersecurity consulting engagements for clients across multiple industries, with a critical infrastructure focus.
  • Assist in cybersecurity maturity assessments, gap analyses, and control reviews across IT and OT environments, comparing current and target states.
  • Help evaluate cybersecurity programs across governance and risk management, IAM and privileged access, data protection, vulnerability management, incident response and recovery, third-party risk and supplier connectivity, security operations and monitoring, and OT security engineering practices.
  • Support OT environment assessments covering ICS/SCADA, plant networks, connected assets, and operational processes, accounting for performance, reliability, and safety constraints.
  • Assist in identifying cybersecurity risks, control gaps, and potential operational impacts; contribute practical, risk-based recommendations and remediation planning.
  • Support reviews of OT network segmentation, secure remote access patterns, asset inventories, system hardening, patching approaches, backup and recovery expectations, and monitoring and logging capabilities.
  • Assist in mapping and testing controls against frameworks and standards such as NIST CSF 2.0 and ISA/IEC 62443, organizing findings into control matrices and prioritized remediation roadmaps.
  • Participate in client interviews, workshops, walkthroughs, and site discussions; document architectures, processes, and control design and operation.
  • Help document cybersecurity operating models, governance processes, and policy, standard, and procedure needs for enterprise and industrial environments.
  • Support development of cybersecurity deliverables, including reports, slide decks, issue logs, control matrices, and remediation roadmaps.
  • Support project management activities, including workstream coordination, status reporting, RAID tracking, and remediation follow-up.
  • Research emerging threats and OT vulnerabilities; incorporate relevant guidance into deliverables and client recommendations.
  • Contribute to proposal development, including scoping, methodology, workplans, and supporting content.

Desired Qualifications

  • Exposure to rail and transit OT environments, including operations centers, communications networks, and SCADA interfaces.
  • Exposure to water/wastewater OT environments, including treatment plants, pump stations, and telemetry/SCADA operations.
  • Familiarity with Canadian public-sector security control expectations such as ITSG-33, helpful for work involving government-aligned control catalogues and risk management approaches.
  • Experience supporting segmentation/DMZ designs, secure remote access, OT asset discovery, vulnerability management in OT, or OT security monitoring.
  • Relevant certifications are an asset: Security+, CISSP, GICSP, ISA/IEC 62443 Fundamentals, CCNA, CISA/CRISC, ISO 27001 Foundation, or similar.

About the Company

Parsons

Digital infrastructure and security solutions provider

Parsons provides digitally enabled solutions in national security, defense, and global infrastructure. Its work spans government and commercial clients, offering services in systems and software engineering, quality assurance, compliance, and security, along with large-scale infrastructure projects and advanced technology implementations. The company helps clients by delivering long-term, contract-based engagements that include AI readiness, data preparation for AI applications, and secure, reliable systems. A key differentiator is its breadth across diverse markets and its emphasis on rigorous systems engineering, QA, compliance, and security to ensure the integrity of critical operations while harnessing AI to improve efficiency and safety. Parsons’ goal is to solve complex security and infrastructure challenges through measurable, value-driven solutions and long-lasting partnerships with clients.

Company size
10,001+
Company stage
IPO
Headquarters
Chantilly, VA
Founded
1944

Recently Posted Jobs

Explore more opportunities at Parsons

See more jobs