In a world of possibilities, pursue one with endless opportunities. Imagine Next!
At Parsons, you can imagine a career where you thrive, work with exceptional people, and be yourself. Guided by our leadership vision of valuing people, embracing agility, and fostering growth, we cultivate an innovative culture that empowers you to achieve your full potential. Unleash your talent and redefine what’s possible.
Job Description:
Parsons is seeking an OT Cybersecurity Consultant to support cybersecurity advisory and technology risk engagements across rail and transit systems, water and wastewater infrastructure, and other industrial/critical infrastructure environments.
This is a consulting-focused role involving assessments, gap analyses, control reviews, client workshops, documentation, and remediation planning across both IT and Operational Technology (OT) environments. You will help clients strengthen cybersecurity programs while respecting OT priorities such as safety, reliability, availability, and operational continuity.
Engagements may align to frameworks and guidance such as NIST CSF 2.0, NIST SP 800-82 Rev. 3, ISA/IEC 62443, ISO/IEC 27001, CIS Controls, and Canadian public-sector control expectations such as ITSG-33, where applicable.
What You'll Be Doing:
- Support delivery of cybersecurity advisory, technology risk, and OT cybersecurity consulting engagements for clients across multiple industries (critical infrastructure focus).
- Assist in cybersecurity maturity assessments, gap analyses, and control reviews across both IT and OT environments (current-state vs target-state).
- Help evaluate cybersecurity programs across domains including:
- governance & risk management
- IAM / privileged access
- data protection
- vulnerability management
- incident response & recovery
- third-party risk & supplier connectivity
- security operations / monitoring
- OT security engineering practices
- Support OT environment assessments including ICS/SCADA, plant networks, connected assets, and operational processes (with attention to performance/reliability/safety constraints).
- Assist in identifying cybersecurity risks, control gaps, and potential operational impacts; contribute to practical, risk-based recommendations and remediation planning.
- Support reviews of OT network segmentation, secure remote access patterns, asset inventories, system hardening, patching approaches, backup/recovery expectations, and monitoring/logging capabilities.
- Assist in mapping/testing controls against frameworks/standards such as NIST CSF 2.0 and ISA/IEC 62443 (e.g., organizing findings into control matrices and prioritized remediation roadmaps).
- Participate in client interviews, workshops, walkthroughs, and site discussions; document architectures, processes, and control design/operation.
- Help document cybersecurity operating models, governance processes, and policy/standard/procedure needs for both enterprise and industrial environments.
- Support development of cybersecurity deliverables: reports, slide decks, issue logs, control matrices, and remediation roadmaps.
- Support project management activities: workstream coordination, status reporting, RAID tracking, and remediation follow-up.
- Conduct research on emerging threats and OT vulnerabilities; incorporate relevant guidance into deliverables and client recommendations.
- Contribute to proposal development (scoping, methodology, workplans, and supporting content).
What Required Skills You'll Bring:
- Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Information Technology, Engineering, or related field.
- 3+ years of relevant experience in cybersecurity, technology risk, IT audit, OT/industrial cybersecurity, compliance, engineering technology environments, or consulting.
- Foundational understanding of cybersecurity and risk management across enterprise IT and OT environments.
- Familiarity with one or more of: NIST CSF, ISO 27001, CIS Controls, ISA/IEC 62443, NIST SP 800-82.
- Basic understanding of OT/industrial concepts: ICS/SCADA components, plant networks, industrial protocols, connected devices, and operational constraints.
- Strong writing and presentation skills (able to produce client-ready deliverables).
- Strong analytical/problem-solving skills with attention to detail.
- Proficiency in Microsoft Excel, Word, PowerPoint, and Visio.
- Willingness to travel to client sites and operational facilities.
What Desired Skills You'll Bring:
- Exposure to rail & transit OT environments (operations centers, communications networks, SCADA interfaces, etc.).
- Exposure to water/wastewater OT environments (treatment plants, pump stations, telemetry/SCADA operations).
- Familiarity with Canadian public-sector security control expectations such as ITSG-33 (helpful for work involving government-aligned control catalogues and risk management approaches).
- Experience supporting any of: segmentation/DMZ designs, secure remote access, OT asset discovery, vulnerability management in OT, or OT security monitoring.
- Relevant certifications (asset): Security+, CISSP, GICSP, ISA/IEC 62443 Fundamentals, CCNA, CISA/CRISC, ISO 27001 Foundation (or similar).
This position is part of our Critical Infrastructure team.
For more than 80 years, our experts have designed and delivered the critical infrastructure that connects and protects communities around the world. We work in collaborative teams, both within the company and with our partners and customers, to plan, design, build, and modernize infrastructure. We take special pride in projects and solutions that improve communities as well as people’s quality of life by promoting economic growth, enhancing mobility, and increasing sustainability and resiliency. Powered by our people, we provide the imagination necessary to support our customers’ visions—and to help them see what's next!
Salary Range: $74,000 - $137,500
This job posting is for a current addition or replacement opportunity within Parsons.
We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as health, vision, dental, employer paid provincial care premiums, Defined Contribution Pension Plan (DCPP), Tax-Free Savings Account (TFSA), Registered Retirement Savings Plan (RRSP), life insurance, paid time off, sick leave, all province observed holidays off, and gym membership discounts to fit your busy lifestyle!
Parsons is an equal opportunity employer committed to diversity, equity, inclusion, and accessibility in the workplace. Parsons equally employs representation at all job levels for indigenous peoples, women, individuals with disabilities, and visible minorities.
We truly invest and care about our employee’s wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons quest—APPLY TODAY!
Parsons is aware of fraudulent recruitment practices. To learn more about recruitment fraud and how to report it, please refer to https://www.parsons.com/fraudulent-recruitment/.