Estuate - Business Analyst - Operational Technology

Job Title: OT (Operational Technology) Business Analyst Role Summary: The OT Business Analyst will bridge the gap between industrial operations and enterprise IT/security teams by gathering, analyzing, and translating requirements across OT environments (ICS/SCADA). This role supports initiatives such as OT visibility, cybersecurity, asset management, and integration with enterprise platforms while ensuring safety, availability, and regulatory compliance. Key Responsibilities: OT Domain & System Understanding: - Document and analyze OT architecture aligned to the Purdue model (Levels 0-5). - Work with core OT components: 1. Field devices: Sensors, actuators. 2. Control systems: PLCs, RTUs, DCS. 3. Supervisory systems: SCADA, HMI. 4. Operations layer: Historians, engineering workstations. 5. Integration layer: DMZ, gateways, jump servers. - Capture dependencies across network protocols (Modbus, OPC-UA, PROFINET). Requirements Gathering & Analysis: - Elicit and document business, functional, and technical requirements for OT initiatives. - Translate OT engineer inputs into business-readable deliverables (BRDs, user stories). - Conduct workshops with plant operations, engineering, and cybersecurity teams. - Create process flows, use cases, and current/future state architectures. OT Cybersecurity & Risk Support: - Support initiatives aligned to NIST CSF, IEC 62443, NERC CIP. - Capture requirements for: 1. OT asset discovery (e.g., Tenable OT, Claroty, Nozomi). 2. Network segmentation and IDMZ design. 3. Vulnerability management in OT environments. - Assist in risk assessments, control mapping, and audit readiness documentation. Asset Visibility & Data Management: - Define and validate OT asset inventory requirements (non-CMDB environments). - Ensure data consistency across tools (Tanium, Tenable, ServiceNow CMDB). - Support reporting and dashboards for OT risk posture. Integration & Digital Transformation: - Gather requirements for integrating OT with enterprise platforms: 1. SIEM (Splunk), data lakes (Snowflake, Databricks). 2. ITSM tools (ServiceNow). - Support API, gateway, and secure IT/OT integration patterns (Level 3.5 DMZ). Stakeholder & Governance Management: - Act as liaison between OT engineers, IT teams, vendors, and leadership. - Manage conflicting priorities (e.g., uptime vs patching). - Support governance frameworks, change management, and operational workflows. Incident, Risk & Compliance Support: - Document incident response workflows for OT environments. - Assist in business continuity and disaster recovery planning. - Translate technical risks into executive-level summaries and dashboards. Required Skills & Experience: OT / ICS Knowledge (Core): Strong understanding of: 1. ICS/SCADA environments. 2. PLCs, RTUs, DCS, HMI systems. 3. Industrial networks and protocols. - Familiarity with Purdue Model & OT segmentation concepts. - Knowledge of OT constraints (availability, safety-first design). Business Analysis Skills: Expertise in: 1. Requirements gathering (Agile/Waterfall). 2. Documentation: BRD, FRD, user stories, acceptance criteria. 3. Process mapping (Visio, Lucidchart). 4. Stakeholder engagement and workshop facilitation. - Experience with Jira, Confluence, ServiceNow. Security & Compliance: Exposure to OT cybersecurity tools and frameworks. Understanding of: 1. Vulnerability management in OT. 2. Risk prioritization vs production impact. - Experience supporting audits and compliance initiatives. Data & Reporting: Ability to define KPIs and metrics for: 1. OT risk posture. 2. Asset coverage and visibility. - Experience with Power BI / dashboards preferred. Preferred Qualifications: - Experience in industries like energy, utilities, manufacturing, oil & gas. - Certifications (nice to have): 1. CBAP / CCBA. 2. GICSP / CISSP / ISA/IEC 62443. - Exposure to Tenable OT, Nozomi, Claroty, Tanium. Key Competencies: - Strong communication translating technical OT business insights. - Ability to operate in high-risk, regulated environments. - Balancing security, safety, and uptime constraints. - Structured, analytical, and solution-oriented thinking.