Cyber Risk and Business Continuity Consultant

Mapping & inventory.

• Inventory OT assets (PLC, RTU, HMI, field networks) and their IT dependencies in the unified CMDB.
• Identify SPOFs: Domain Controller, inter-network links, critical markets, firewalls

Operational risk analysis.

• Apply an internal methodology to model threats (tunnel closure, dam overflow, …), vulnerabilities, and impacts (personal safety, environment, availability, finance, image, …).
• Use concrete scenarios based on experience feedback.

Treatment plan & prioritization.

• Develop the implementation plan for actions to address analyzed risks (reduction, avoidance, transfer, acceptance).
• Quantify cost/impact and develop a risk reduction roadmap aligned with the operational continuity of systems.
• Communicate the complete risk management cycle.

Project & market integration.

• Draft IT/OT security clauses in specifications.
• Verify the compliance of critical OT suppliers (automation maintenance, supervision).

IT/OT & SOC synergy.

• Translate OT risks into logging requirements and detection rules for the SOC (use-case, automation takeovers, …).

Resilience & exercises.

• Participate in restoration tests and OT/IT table-top exercises to validate impact hypotheses.
• Contribute to lessons learned and analyze root causes.
• Contribute to the continuous improvement of service continuity plans (PCA) and disaster recovery plans (DRP).

Reporting & governance.

• Maintain the OT risk register.
• Prepare summaries for an internal cybersecurity committee and for regulatory compliance audits.