Manager / Assistant Manager – OT Cyber Security
Overview
EY South Africa is looking to strengthen its Operational Technology (OT) Cyber Security capability with experienced OT cybersecurity professionals at Assistant Manager and Manager level.
We are specifically seeking candidates with hands-on OT, ICS and critical infrastructure experience who are comfortable working in operational environments such as mining, utilities, power generation, manufacturing and oil & gas.
This role will require regular travel and, in some cases, extended periods at client sites across South Africa and the broader Africa region.
What We Are Looking For
Assistant Manager
- 5–8 years relevant experience.
Manager
- 8–12 years relevant experience.
Candidates must have practical experience in one or more of the following sectors:
- Utilities
- Power Generation
- Oil & Gas
- Manufacturing
- Critical Infrastructure
Required Technical Experience
- OT Cyber Security Assessments
- ICS Security
- SCADA Security
- OT Risk Assessments
- Vulnerability Assessments
- Security Architecture Reviews
- Network Segmentation
- Asset Discovery
- OT Governance and Compliance
- Incident Response within OT environments
Preferred Framework Experience
- NIST CSF
- NIST 800-82
- C2M2
- ISA Standards
- ISO 27001
Preferred Technologies
- Nozomi
- Claroty
- Microsoft Defender for IoT
- Tenable.ot
- Splunk
- Microsoft Sentinel
Preferred Certifications
One or more of the following:
- ISA/IEC 62443 Specialist Certifications
- GICSP
- CISSP
- CISM
- CCNA
- Security+
- Nozomi Certifications
- Claroty Certifications
Additional Requirements
- Must be willing to travel extensively.
- Must be comfortable spending extended periods at remote client locations.
- Strong report writing and client engagement skills.
- Ability to conduct workshops, interviews and site assessments.
Key Success Factors
- Deep OT and ICS knowledge.
- Ability to work effectively in operational environments.
- Strong understanding of IEC 62443 and OT security principles.
- Practical experience rather than purely governance-focused experience.