Operational Technology (OT) Cybersecurity Analyst at RMC Global

San Antonio, Texas, United States -

Full Time

Start Date

Immediate

Expiry Date

07 Oct, 26

Salary

125000.0

Posted On

09 Jul, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

OT Cybersecurity, Vulnerability Assessment, Risk Analysis, Critical Infrastructure Protection, Regulatory Compliance, Technical Writing, Stakeholder Management, Threat Modeling, Incident Status Reporting, Problem Solving, Logical Analysis, Time Management

Industry

Defense and Space Manufacturing

Description

Description RMC is seeking an Operational Technology (OT) Cybersecurity Analyst for a full-time in-office position in San Antonio, TX! Are you ready to embark on a fulfilling and impactful career journey with Risk Mitigation Consulting (RMC)? We're in search of an exceptional OT Cyber Threat Analyst to become a part of our mission-driven team, dedicated to making a difference in the federal and commercial markets. At RMC, we're all about enhancing security for both our military and global commercial partners, offering an array of services such as Risk Management, Mission Assurance, and Cybersecurity. Our team's well-being is paramount, and we reflect this commitment through our flexible work environment and exceptional company culture. By joining RMC, you become a key contributor to our mission – Assuring Tomorrow! When you join RMC, you'll experience a range of benefits, including: Comprehensive health, vision, and dental insurance plans fully covered for employees Subsidized dependent health care coverage Participation in our Annual Bonus Program Life insurance policy equivalent to 1x your annual salary. Company paid short and long-term disability Cell phone reimbursement of $65 per month 401(k) Plan with contributions A 401(k) Safe Harbor Employer Contribution Program, which includes a 3% contribution Position Summary: Provides operational technology (OT) cybersecurity subject matter support for clients including assessments, vulnerability and risk analysis, and report and presentation development. The Analyst is responsible for providing support to their assigned projects and clients by executing tasks on time and at and at high quality to accomplish project requirements. Accountability, quality of work, functional expertise, communication, teamwork, time management, creativity, training, and staying informed on operational technology types, capabilities, threats and cyber mitigations are key aspects of success in this position. Essential Functions: Perform vulnerability and risk assessments for operational technology supporting critical infrastructure Perform vulnerability analysis using threat and hazard data and documents results in reports or other client-required deliverables Identify and assess critical asset dependencies or relationships to operational technology Collaborate with other Analysts and subject matter experts on assessment teams to produce high quality products to clients Review and advise on policies, order, directives and other information sources applicable to operational technology and critical infrastructure. Participate and contribute to working groups or meetings with the project team as needed Vulnerability & Risk Assessment Conduct vulnerability assessments of OT assets, applying risk-based prioritization that accounts for operational impact, compensating controls, and the consequences of patching in live industrial environments Map identified vulnerabilities to threat actor capabilities and likelihood of exploitation to support client risk decisions Track remediation efforts and validate closure of identified findings Client Engagement & Reporting Serve as a day-to-day technical point of contact for assigned clients, delivering regular briefings on threat landscape changes, incident status, and security posture Communicate findings clearly and professionally across technical, operational, and executive stakeholder levels Regulatory & Standards Compliance Support Support clients in understanding and meeting cybersecurity obligations under relevant frameworks and regulations, including NERC CIP, NIST SP 800-82, IEC 62443, TSA Security Directives, and AWIA 2018, as applicable by sector Assist in the development and review of OT security policies, procedures, and security plans Collaboration & Intelligence Sharing Coordinate with government partners, sector ISACs (E-ISAC, WaterISAC, MS-ISAC), and peer organizations to share and receive actionable threat information Collaborate with internal red team, engineering, and advisory practice staff to integrate findings into broader client security programs Participate in tabletop exercises, drills, and wargames simulating OT-targeted attack scenarios Continuous Improvement Stay current on emerging OT/ICS threats, vulnerabilities, and adversary campaigns through ongoing research, training, and industry engagement Contribute to the firm’s internal knowledge base, playbooks, and methodology development Competencies: Significant foundational knowledge of cybersecurity principles as they apply to the OT environments of critical infrastructure industries (e.g., utility systems (electrical, water, gas, fuel etc.) and building automation systems) Demonstrable experience in the field of risk management, with a ability for translating complex cybersecurity requirements to actionable work plans Cyber supply chain risk knowledge as applicable to operational technology and critical infrastructure Excellent interpersonal and communication skills, capable of engaging with a spectrum of stakeholders from internal technical SMEs, executives, and administrative support staff to client decision-makers Proactive and inquisitive, committed to continual learning and adapting within fast-evolving industries Excellent writing skills, strong communication abilities, good time management and organizational skills Experience using Microsoft Office tools and applications such as Word, PowerPoint, Excel and SharePoint Work confidently in a fast-paced environment with the ability to support multiple projects Ability to work independently on multiple tasks with minimal direction to meet deadlines Good time management and organizational skills Ability to work in a team environment and take initiative to help ensure team tasks are successfully completed within required timelines Possess strong problem-solving skills and the ability to think outside-the-box Ability to perform logical analysis of complex cyber issues Familiarity with Federal and DoW Cybersecurity policy and initiatives, and NIST guidance Requirements Education & Experience Requirements Bachelor’s degree and 5+ years of experience in the industry Desired Certificates & Licenses: CISSP CompTIA Security+ GICSP GRID Other Requirements: Security Clearance (Optional): Obtaining a DoD Secret Clearance. Applicants selected will be subject to a government security investigation and must meet eligibility requirements for clearance level required for the job. Valid Passport: Possession of a current passport with a minimum of 8 months remaining until the expiration date. Travel Flexibility: Willingness and capability to travel, CONUS approximately 15-20% of the time. Telecommunication is authorized for this role. Work Environment Compliance: Commitment to maintaining a drug-free work environment, U.S. Citizenship, and possession of a valid state driver's license. Want to take the next step in your career with RMC? This OT Cybersecurity Analyst role is where your skills and talents will thrive, and you'll be part of something truly meaningful. Join us today! https://rmcglobal.com/ Reasonable Accommodations Statement To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. Reasonable Accommodations may be made to enable qualified individuals with disabilities to perform the essential functions. RMC has reviewed this job description to ensure that essential functions and basic duties have been included. It is intended to provide guidelines for job expectations and the employee's ability to perform the position described. It is not intended to be construed as an exhaustive list of all functions, responsibilities, skills, and abilities. Additional functions and requirements may be assigned by your manager as deemed appropriate. This document does not represent a contract of employment, and RMC reserves the right to change this position description and/or assign tasks for the employee to perform, as RMC may deem appropriate. RMC is an Equal Opportunity Employer.

Responsibilities

Perform vulnerability and risk assessments for operational technology supporting critical infrastructure and develop high-quality reports for clients. Collaborate with stakeholders and government partners to manage threat landscapes and ensure compliance with cybersecurity frameworks.