Work autonomously as an expert in the OT cyber risk and security space to support Marsh’s business in a department which is experiencing a double-digit annual growth rate
Be a part of Marsh’s cyber risk consulting practice offering multiple types of cyber risk assessments and cybersecurity transformation projects
Offer expertise to our extensive client base throughout Canada and in other regions as necessary
Client and team related travel to Canada and in the rest of the Americas for in-person meetings and/or site visits
Actively contribute to thought leadership and business development, internally and externally
Take the lead for one or more type of offerings such as for example “OT Security Services”, “OT Monitoring Solutions”, “Cyber Incident Response Planning”, “Cyber Risk Quantification”, etc.
Lead client engagements by conducting security program assessments, cybersecurity transformations, security architecture reviews, etc.
Remain up to date on the latest cyber-attack techniques and cybersecurity solutions
Build and maintain excellent relationships with prospects and client organizations, as well as our internal network of client facing colleagues who open doors to new project opportunities
Requirements
Excellent English speaking and writing capabilities (main language of work)
Completion of relevant certifications: GCIP, GICSP, ICSP, ISASecure, CISSP, CISM, etc.
Degree in Computer Science, OT Security, Information Security, or related field
Alternatively strong field / hands-on experience in OT and OT Security
7-15 years of experience in OT Security
At least 5 years of experience in an advisory or external consulting capacity
A strong ability and experience of analyzing client needs in order to design, propose and manage consulting projects, including facilitation of workshops and production of deliverables
A strong degree of technical familiarity with site and enterprise security architecture (PCLs and HMI, Firewalls and other Network Security Devices, Virtualization, Storage, Backups Technology, OT Monitoring Solutions, SIEMs, EDRs, etc.), Network Protocols, Operating Systems, OT Specific Solutions
A strong knowledge and experience of using major cybersecurity frameworks in security assessment projects (IEC 62443, NIST 800-82, NIST CSF / 800-61, CIS 18, ISO 27001, etc.)
A strong understanding of security management domains such as: Vulnerability and Configuration Management, Network and Application Security Testing, Incident Response Planning & Table-Top Exercises, Disaster Recovery Planning, Email and Web Security, Security Awareness, Vendor Risk Management, Secure Software Development Practices, etc.
A strong knowledge with possible hands-on exposure to Cyber Incident Management, IT Forensics, Penetration Testing and/or Quantification of Cyber Risk Scenarios would be a plus
Experience working and managing projects in a fast-paced environment under tight timelines
Research and analytical skills with the ability to clearly and articulately identify and define problems and develop creative solutions to address client needs
Excellent communication skills (written and verbal), including ability to develop and deliver presentations, lead interviews, and facilitate client workshops
Proven relationship development and management skills with demonstrated ability to interact, establish credibility and engender trust with a wide range of professionals across all levels
Tech Stack
Cyber Security
Firewalls
Benefits
Professional development opportunities
Vibrant and inclusive culture
Flexible working arrangements
Talent collaboration with colleagues
OT Cybersecurity Consulting Director at Marsh McLennan | JobVerse