Senior OT Cybersecurity Risk Analyst

This role is designed for someone who enjoys working at the intersection of people, technology, and operations — helping teams understand risk, make informed decisions, and move work forward securely, efficiently and confidently.

In this role, you will partner closely with the business, infrastructure, and OT teams to understand how systems are used in the real world and how cybersecurity can best support reliability, security, and business outcomes. You will help translate vulnerabilities, security findings, and technical risks into clear, actionable insights that leaders and operators can use — not just reports that sit on a shelf. Your work will focus on enablement and clarity, not gatekeeping.

What you will do:
Act as a trusted partner to the various business
Translate cybersecurity risks (e.g., vulnerabilities, OT exposures) into business‑relevant impact and options
Support decision‑making by framing risk, tradeoffs, and remediation paths, not just control gaps
Assist with security reviews for OT environments, and hybrid IT/OT architectures
Partner with engineering and operations teams to understand how systems are actually used, not just how they’re designed
Support secure integration of new assets, vendors, or acquisitions into existing environments
Helping prioritize remediation based on operational impact and risk
Tracking remediation commitments and timelines
Identifying recurring patterns or systemic issues
Contribute to risk assessments, exception reviews, and documentation in collaboration with Cyber teams
Gather, document, and clarify security requirements in a way that is usable by non‑security teams
Create clear summaries, risk narratives, and visuals for leadership and stakeholders
Help standardize repeatable processes and templates to reduce friction and rework

What we are looking for:
Experience in one or more of the following:
OT, ICS, or industrial environments
Gas, energy, utilities, or critical infrastructure operations
IT infrastructure, networking, or systems administration
Cybersecurity, risk management, or vulnerability management

Strong ability to analyze complex problems and communicate clearly
Comfort working across technical and non‑technical audiences
Curiosity, learning mindset, and willingness to ask “why”
Self-starter with little to no guidance to work with various teams
Ability to create reports, metrics and analyses that convey the message succinctly and accurately