Senior OT Cybersecurity Risk Analyst

This role is designed for someone who enjoys working at the intersection of people, technology, and operations — helping teams understand risk, make informed decisions, and move work forward securely, efficiently and confidently.

In this role, you will partner closely with the business, infrastructure, and OT teams to understand how systems are used in the real world and how cybersecurity can best support reliability, security, and business outcomes. You will help translate vulnerabilities, security findings, and technical risks into clear, actionable insights that leaders and operators can use — not just reports that sit on a shelf. Your work will focus on enablement and clarity, not gatekeeping.

What you will do

Act as a trusted partner to the various business

Translate cybersecurity risks (e.g., vulnerabilities, OT exposures) into business‑relevant impact and options

Support decision‑making by framing risk, tradeoffs, and remediation paths, not just control gaps

Assist with security reviews for OT environments, and hybrid IT/OT architectures

Partner with engineering and operations teams to understand how systems are actually used, not just how they’re designed

Support secure integration of new assets, vendors, or acquisitions into existing environments

Helping prioritize remediation based on operational impact and risk

Tracking remediation commitments and timelines

Identifying recurring patterns or systemic issues

Contribute to risk assessments, exception reviews, and documentation in collaboration with Cyber teams

Gather, document, and clarify security requirements in a way that is usable by non‑security teams

Create clear summaries, risk narratives, and visuals for leadership and stakeholders

Help standardize repeatable processes and templates to reduce friction and rework

What we are looking for

Experience in one or more of the following

OT, ICS, or industrial environments

Gas, energy, utilities, or critical infrastructure operations

IT infrastructure, networking, or systems administration

Cybersecurity, risk management, or vulnerability management

Strong ability to analyze complex problems and communicate clearly

Comfort working across technical and non‑technical audiences

Curiosity, learning mindset, and willingness to ask “why”

Self-starter with little to no guidance to work with various teams

Ability to create reports, metrics and analyses that convey the message succinctly and accurately