OT SECURITY ANALYST (EL)

At ABB, we help industries run leaner and cleaner—and every person here makes that happen. You’ll be empowered to lead, supported to grow, and proud of the impact we create together. Join us and help run what runs the world. This Position reports to: IS Manager Your Role And Responsibilities (Mandatory) Supports ABB Electrification (EL) global OT security operations across worldwide factories and operational sites. Acts as coordinator and facilitator, bridging the gap between global OT security services, country-level Information Security (IS) teams, and factory operations to ensure cohesive and consistent OT security management. Responsible for OT device onboarding, vulnerability management, asset visibility, compliance support, and stakeholder reporting in alignment with ABB IS policies, standards, and global OT security frameworks. The work model for the role is: Onsite / Hybrid This role is contributing to the Regional Security – AMEA / Head of Information Security & Compliance – EL You will be mainly accountable for: OT Device Onboarding & IDS Integration Facilitates and supports the onboarding of OT devices onto Intrusion Detection System (IDS) platforms, including Nozomi and Claroty, across global factory sites. Configures and maintains OT security modules within ServiceNow (SNOW) for asset and incident management. Coordinates with country IS teams and factory operations to ensure smooth integration and minimal operational disruption during onboarding activities. Vulnerability Management Generates and analyzes vulnerability reports from IDS platforms and contextualizes findings within specific factory OT environments. Coordinates remediation efforts with factory and country IS teams, monitors progress, validates the effectiveness of fixes, and tracks remediation status to closure. Escalates critical vulnerabilities to the global OT security team with recommended risk-based actions. Asset Visibility & Inventory Management Maintains accurate and comprehensive OT asset inventories across IDS platforms and ServiceNow. Ensures full asset visibility for all onboarded factory sites. Validates asset data quality and consistency across platforms, identifying and resolving gaps or discrepancies in asset records. Assessment, Compliance & Audits Supports periodic OT security assessments, compliance checks, and audit activities to ensure adherence to ABB IS policies, OT security standards (ISA/IEC 62443, NIST CSF), and regulatory requirements. Assists in preparing factory IS teams for audits, participates in assessment activities, and documents findings with remediation recommendations. Reporting & Documentation Provides weekly status updates on onboarding progress, vulnerability management activities, and key risks to relevant stakeholders. Develops and maintains comprehensive monthly OT security dashboards for senior management visibility. Documents assessment findings, remediation plans, and progress against agreed milestones. Ensures all documentation meets ABB IS policy and audit readiness standards. Stakeholder Engagement & Coordination Acts as the primary liaison between global OT security services, country IS teams, and factory operations to ensure cohesive communication and execution of OT security activities. Creates effective partnerships with factory managers and country IS teams, promoting understanding of OT security risks, requirements, and remediation priorities. Coordinates meetings and workshops that bring teams into alignment, encourage engagement, and resolve issues across time zones and geographies. Processes & Continuous Improvement Sets up and improves local engagement processes to coordinate with global OT security services and meet compliance goals. Identifies process improvement opportunities across onboarding, vulnerability management, and reporting workflows. Contributes to the development of best-practice OT security procedures and playbooks for factory engagements. Internal Controls Ensures all activities comply with ABB Regulations, ABB Group IS Guidelines, and applicable security policies. Adheres to ABB data privacy and confidentiality requirements in all engagements. Ensures audit readiness at all times across assigned factory scopes. Qualifications For The Role (Mandatory) • Bachelor's or Master's degree in Information Technology, Computer Science, Electrical/Control Engineering, Cybersecurity, or a related field. • 5+ years of experience in OT/ICS security or industrial cybersecurity roles. • At least 3 years of practical experience working with OT IDS platforms such as Nozomi Networks or Claroty. • Demonstrated experience with IT Service Management tools, including ServiceNow. • Experience in vulnerability management within OT/ICS environments. • Experience overseeing OT security programs within manufacturing or other industrial settings. • Experience working across multiple countries and cultures in a global organization. Technical Knowledge • Solid knowledge of OT security frameworks: ISA/IEC 62443, NIST Cybersecurity Framework (CSF), NIST SP 800-82. • Deep familiarity with OT/ICS network architectures, the Purdue Model, and industrial protocols such as Modbus, PROFINET, DNP3, and OPC-UA. • Knowledge of IT/OT convergence security challenges and best practices. • Familiarity with ABB IS policies and security standards. • Understanding of ISO 27001 and its application to OT environments. Skills & Abilities • Advanced analytical thinking and problem-solving capability, with skill in framing OT vulnerability findings appropriately. • High-level written and verbal communication skills for technical and non-technical audiences. • Ability to produce clear, concise dashboards, reports, and documentation. • Ability to work well with stakeholders and communicate effectively across cultural and functional boundaries. • Motivated to work effectively in a primarily remote engagement model. • Personal integrity with ability to handle confidential and sensitive information appropriately. Certifications • GICSP (Global Industrial Cyber Security Professional) • CSSA (Certified SCADA Security Architect) • ISA/IEC 62443 Cybersecurity Certificate Program • CompTIA Security+ or equivalent • ISO 27001 Lead Implementer or Lead Auditor • Nozomi Networks or Claroty platform certifications SFIA V.7 Skills • Information Security (SCTY) – Level 4 • Compliance Management (CORE) – Level 4 • Vulnerability Assessment (VASM) – Level 4 • Relationship Management (RLMT) – Level 4 • Incident Management (USUP) – Level 4 • Specialist Advice (TECH) – Level 4 • Asset Management (ASMG) – Level 4 • Emerging Technology Monitoring (EMRG) – Level 3 • Security Administration (SCAD) – Level 4 • Performance Management (PEMT) – Level 3 More About Us (Mandatory) "Electrification provides leading electrical distribution and management technologies, solutions and services to electrify the world in a safe, smart and sustainable way. The portfolio includes medium- and low-voltage electrical components, switchgear

Bachelor's or Master's degree in Information Technology, Computer Science, Electrical/Control Engineering, Cybersecurity, or a related field. 5+ years of experience in OT/ICS security or industrial cybersecurity roles. At least 3 years of practical experience working with OT IDS platforms such as Nozomi Networks or Claroty. Demonstrated experience with IT Service Management tools, including ServiceNow. Experience in vulnerability management within OT/ICS environments. Experience overseeing OT security programs within manufacturing or other industrial settings. Experience working across multiple countries and cultures in a global organization.

Supports ABB Electrification (EL) global OT security operations across worldwide factories and operational sites. Acts as coordinator and facilitator, bridging the gap between global OT security services, country-level Information Security (IS) teams, and factory operations to ensure cohesive and consistent OT security management. Responsible for OT device onboarding, vulnerability management, asset visibility, compliance support, and stakeholder reporting in alignment with ABB IS policies, standards, and global OT security frameworks. OT Device Onboarding & IDS Integration: facilitates onboarding of OT devices onto IDS platforms (Nozomi, Claroty); configures and maintains OT security modules within ServiceNow for asset and incident management; coordinates onboarding with country IS teams and factory operations. Vulnerability Management: generates and analyzes vulnerability reports from IDS platforms; coordinates remediation efforts; tracks remediation status. Asset Visibility & Inventory Management: maintains OT asset inventories across IDS platforms and ServiceNow; ensures asset visibility and data quality. Assessment, Compliance & Audits: supports OT security assessments, compliance checks, and audits; prepares factory IS teams for audits and documents findings with remediation recommendations. Reporting & Documentation: provides weekly status updates; develops monthly OT security dashboards; documents assessment findings and remediation progress. Stakeholder Engagement & Coordination: acts as primary liaison between global OT security services, country IS teams, and factory operations; coordinates meetings and workshops. Processes & Continuous Improvement: identifies process improvement opportunities; contributes to development of OT security procedures and playbooks. Internal Controls: ensures compliance with ABB regulations and policies; maintains audit readiness.