Be at the heart of actionFly remote-controlled drones into enemy territory to gather vital information.

Apply Now

Business Analyst – OT & Cybersecurity (Heavy Asset Industry)

Cognizant
London
5 months ago
Applications closed

Related Jobs

View all jobs

Senior Business Analyst, Threat Intelligence Analyst

Business Systems Support Analyst (ERP)

Business Intelligence – Power BI Report Writer

Cyber Security Specialist | Purple Team

Incident Analyst

Incident Analyst

The Company

Cognizant (NASDAQ:CTSH) is a leading provider of information technology, consulting, and business process outsourcing services, dedicated to helping the world's leading companies build stronger businesses. Headquartered in Teaneck, New Jersey (U.S.), Cognizant has over 350,000 employees as of January 2024. Cognizant is a member of the NASDAQ-100, the S&P 500, the Forbes Global 1000, and the Fortune 500 and is ranked among the top performing and fastest growing companies in the world.

Cognizant Consulting

At Cognizant, our consultants orchestrate the capabilities to truly change the game across strategy, design, technology and industry/functional knowledge to deliver insight at speed and solutions at scale. Our consulting services elevate the unique abilities and business aspirations of customers and employees and build relationships based on trust and value.

Water Utilities Consulting

With the arrival of AMP8 and recent market developments, Water Utilities in the UK have embarked on a transformation journey that focuses on sustainability (fewer pollution incidents, green energy powered water treatment etc.), reliable infrastructure(fewer flooding incidents, leakages etc.), customer centricity (affordable bills, enhanced customer experience), social responsibility(support for vulnerable customers), and most importantly disruption from innovative competitors entering the marketplace.

Cognizant has multiple engagements with water utilities in the UK where we are utilising our capabilities in data science and digital enablement to help them lead this transformation through new offerings, solutions and innovative business models that are aligned to the market trends and regulatory commitments. We are looking for experienced business analysts/consultants/product owners who are passionate about making a difference for our clients in the energy and utilities domain. This is an opportunity for being at the forefront of the transformation journey working with the best minds in the energy and utilities domain at Cognizant.

Job Summary:

We are seeking a Business Analyst with expertise in Operational Technology (OT) and Cybersecurity within heavy asset industries (e.g., utilities, manufacturing, oil & gas, transportation, mining). The ideal candidate will support cybersecurity initiatives for OT environments, ensuring compliance, risk management, and secure integration of industrial control systems (ICS), SCADA, and IoT. This role requires strong analytical, technical, and stakeholder management skills to enhance OT security while aligning with business objectives.

Key Responsibilities:

Business Analysis & Cybersecurity Strategy

  • Gather and document business and technical requirements for OT cybersecurity projects.
  • Analyze current OT security controls, risks, and vulnerabilities to identify areas for improvement.
  • Support the implementation of cybersecurity frameworks (NIST CSF, IEC 62443, NERC CIP, ISO 27001) for industrial environments.
  • Assist in defining security policies, procedures, and governance models for OT networks and assets.

Operational Technology (OT) Security & Risk Management

  • Work with IT, OT, and security teams to ensure secure deployment of SCADA, ICS, and IIoT solutions.
  • Support network segmentation, zero-trust architecture, and intrusion detection strategies for OT environments.
  • Collaborate with cybersecurity and operations teams on threat monitoring, incident response, and vulnerability management.
  • Assist in risk assessments, penetration testing, and compliance audits for industrial networks.

Technology Integration & Compliance

  • Work with stakeholders to integrate EAM/CMMS, SCADA, and industrial automation systems with cybersecurity controls.
  • Support projects related to secure remote access, identity & access management (IAM), and anomaly detection for OT environments.
  • Ensure OT systems comply with industry regulations such as NERC CIP, ISA/IEC 62443, GDPR, or CISA guidelines.
  • Assist in vendor risk management and the evaluation of cybersecurity solutions for OT environments.

Data Analytics & Reporting

  • Develop dashboards and reports on OT security performance, incident trends, and compliance status.
  • Analyze OT cybersecurity logs and events to identify potential threats or vulnerabilities.
  • Provide insights on security best practices, asset inventory management, and risk mitigation strategies.

Desirable skills and experience

  • Experience as a Business Analyst in OT cybersecurity, industrial automation, or IT security within heavy asset industries.
  • Strong understanding of SCADA, ICS, DCS, PLCs, and industrial networking protocols (Modbus, OPC, DNP3, etc.).
  • Experience with cybersecurity risk assessments, NIST CSF, IEC 62443, or similar frameworks.
  • Proficiency in business process mapping, requirements gathering, and stakeholder management.
  • Strong knowledge of cybersecurity tools such as SIEM, firewalls, IDS/IPS, and endpoint security.
  • Familiarity with cloud security, IoT security, and secure OT-IT convergence.

Preferred:

  • Certifications such as GICSP, CISSP, CISM, CISA, or ISA/IEC 62443.
  • Experience with OT penetration testing, threat hunting, or incident response.
  • Knowledge of AI/ML-based cybersecurity solutions and anomaly detection for OT environments.
  • Understanding of regulatory compliance in energy, utilities, or critical infrastructure sectors.

#J-18808-Ljbffr

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Cyber Security Recruitment Trends 2025 (UK): What Job Seekers Must Know About Today’s Hiring Process

Summary: UK cyber security hiring has shifted from title‑led CV screens to capability‑driven assessments that emphasise incident readiness, cloud & identity security, detection engineering, governance/risk/compliance (GRC), measurable MTTR/coverage gains & secure‑by‑default engineering. This guide explains what’s changed, what to expect in interviews, & how to prepare—especially for SOC analysts, detection engineers, blue/purple teamers, penetration testers, cloud security engineers, DFIR, AppSec, GRC & security architecture. Who this is for: SOC & detection engineers, security operations leads, DFIR analysts, penetration testers/red teamers, purple teamers, AppSec/DevSecOps engineers, security architects, cloud security engineers, identity/IAM engineers, vulnerability managers, GRC/compliance specialists, product security & security programme managers targeting roles in the UK.

Why Cyber Security Careers in the UK Are Becoming More Multidisciplinary

Cyber security used to be viewed primarily as a technical discipline: firewalls, encryption, intrusion detection, penetration testing. In the UK today, it’s far broader. Organisations now face complex legal frameworks, ethical dilemmas, human-behaviour risks, communication challenges & usability hurdles. This shift means cyber security careers are becoming more multidisciplinary. From protecting NHS patient records to defending financial services, securing supply chains & safeguarding national infrastructure, cyber security now touches every sector. Employers increasingly want professionals who understand law, ethics, psychology, linguistics & design alongside traditional technical skills. In this article, we’ll explore why UK cyber security careers are expanding in this way, how these five disciplines shape the profession, and what job-seekers & employers need to know to thrive in this new landscape.

Cyber Security Team Structures Explained: Who Does What in a Modern Cyber Security Department

Cyber security has become a top priority for UK organisations of all sizes. From small businesses to financial institutions, healthcare providers, and government bodies, the risk of cyber attack is now a constant concern. Threats are more sophisticated, regulations more demanding, and customers more aware of data privacy than ever before. But defending against cyber threats isn’t simply about having the right tools — it’s about having the right team. A modern cyber security department relies on clearly defined roles and responsibilities to ensure that defences are proactive, incidents are managed swiftly, and compliance is maintained. This article explains the structure of a modern cyber security team, the roles you’ll typically find within it, how they collaborate, and what skills, qualifications, and salaries are expected in the UK job market.