ZipRecruiter

Log In

1

Cyber Risk Manager Jobs in Indiana (NOW HIRING)

Barbaricum

Program Manager III

Indianapolis, IN

... cyber capabilities. The successful candidate will ensure program performance, compliance with ... Develop and maintain program management plans, risk registers, and performance metrics. Coordinate ...

next page

Showing results 1-20

All JobsCyber Risk Manager JobsCyber Risk Manager Jobs in Indiana

Cyber Risk Manager information

See Indiana salary details

$49K

$106.2K

$161.8K

How much do cyber risk manager jobs pay per year?

As of Jun 19, 2026, the average yearly pay for cyber risk manager in Indiana is $106,153.00, according to ZipRecruiter salary data. Most workers in this role earn between $85,600.00 and $122,800.00 per year, depending on experience, location, and employer.

How does a Cyber Risk Manager typically collaborate with other departments to strengthen an organization's cybersecurity posture?

A Cyber Risk Manager frequently works with IT, legal, compliance, and business units to identify, assess, and mitigate cyber risks across the organization. This collaboration involves leading risk assessments, facilitating security awareness training, and ensuring that cybersecurity policies align with business objectives. Regular cross-department meetings and incident response simulations are common, fostering a shared responsibility for cyber resilience. Effective communication and relationship-building skills are essential in this role to bridge technical and non-technical teams.

What is the difference between Cyber Risk Manager vs Cybersecurity Analyst?

AspectCyber Risk ManagerCybersecurity Analyst
CertificationsCRISC, CISSP, CISMCompTIA Security+, CISSP, CEH
Work EnvironmentRisk assessment, policy development, strategic planningMonitoring security systems, incident response, vulnerability testing
Employer & Industry UsageFinancial, healthcare, large enterprisesIT departments, security firms, corporate environments

The Cyber Risk Manager focuses on identifying, assessing, and mitigating organizational cyber risks through strategic planning and policy development. In contrast, the Cybersecurity Analyst primarily monitors security systems, responds to incidents, and tests vulnerabilities. Both roles require certifications like CISSP, but their daily tasks and focus areas differ significantly, with the manager taking a broader, strategic approach and the analyst handling operational security tasks.

What are the key skills and qualifications needed to thrive as a Cyber Risk Manager, and why are they important?

To thrive as a Cyber Risk Manager, you need a solid background in information security, risk assessment, and compliance, often supported by a degree in cybersecurity or a related field. Familiarity with risk management frameworks (such as NIST or ISO 27001), GRC tools, and relevant certifications like CISSP or CISM is typically required. Excellent analytical thinking, communication, and leadership skills set top performers apart in this role. These skills are crucial for identifying risks, implementing effective controls, and ensuring the organization’s digital assets remain secure and compliant.

Can you make $500,000 a year in cyber security?

Cyber Risk Managers and senior cybersecurity professionals can potentially earn $500,000 or more annually, especially with extensive experience, advanced certifications like CISSP or CISM, and leadership roles such as Chief Information Security Officer (CISO). High salaries are often associated with large organizations, specialized skills, and strategic responsibilities in cybersecurity management. However, such compensation levels are typically reached after many years of experience and proven expertise in the field.

Is CISO a high paying job?

A Chief Information Security Officer (CISO) is typically a high-paying executive role in cybersecurity, with salaries often exceeding six figures depending on the organization size and industry. CISOs usually have extensive experience, leadership skills, and certifications like CISSP or CISM, which contribute to their compensation. The role involves strategic oversight of an organization's security posture and risk management.

What does a cyber risk manager do?

A cyber risk manager assesses and mitigates cybersecurity threats to an organization’s information systems. They identify vulnerabilities, develop risk management strategies, and implement security controls, often using tools like risk assessment frameworks and security software. The role requires strong analytical skills and relevant certifications such as CISSP or CISM.

What is the 80 20 rule in cyber security?

The 80/20 rule in cybersecurity suggests that approximately 80% of security issues are caused by 20% of vulnerabilities or threats. Cyber Risk Managers focus on identifying and mitigating these critical vulnerabilities to improve overall security posture efficiently.
What are popular job titles related to Cyber Risk Manager jobs in Indiana? For Cyber Risk Manager jobs in Indiana, the most frequently searched job titles are:
What job categories do people searching Cyber Risk Manager jobs in Indiana look for? The top searched job categories for Cyber Risk Manager jobs in Indiana are:
Cyber Risk Manager jobs near you
Cyber Operational Technology/ Industrial Control Systems (OT/ICS) Senior Consultant

Cyber Operational Technology/ Industrial Control Systems (OT/ICS) Senior Consultant

Deloitte

Indianapolis, IN • Remote

Other

Posted 23 days ago

Deloitte rating

8.1

Company rating: 8.1 out of 10

Based on 86 frontline employees who took The Breakroom Quiz

58th of 138 rated financial services

Job description

Cyber Operational Technology/ Industrial Control Systems (OT/ICS) Senior Consultant 

Position Summary

As an OT/ICS Cybersecurity Senior Consultant at Deloitte, you will play a pivotal role in designing, implementing, and optimizing cybersecurity solutions for industrial environments. You will work with clients in energy, manufacturing, utilities, and other critical infrastructure sectors to secure operational technology (OT) and industrial control systems (ICS), ensuring the safety, reliability, and resilience of their operations. You will leverage your deep technical expertise, industry knowledge, and hands-on experience with leading OT/ICS security tools to deliver innovative solutions, lead project teams, and provide strategic guidance to clients.

Recruiting for this role ends on 12/31/2026.

Work you'll do

OT/ICS Security Architecture & Design

  • Lead the design and implementation of OT/ICS cybersecurity architectures, including network segmentation, secure remote access, and integration with IT security controls.
  • Develop and document security reference architectures, blueprints, and roadmaps tailored to client environments and industry standards (e.g., NIST 800-82, IEC 62443).
  • Evaluate, select, and deploy OT/ICS cybersecurity technologies, with hands-on experience in:
    • Claroty for OT asset discovery and vulnerability management
    • Palo Alto and Cradlepoint for firewall configuration, segmentation, and secure connectivity
    • CrowdStrike for OT monitoring and threat detection
    • BeyondTrust for privileged secure remote access management
    • Familiarity with other vendor tools such as Cisco (network security), ServiceNow (ticketing and workflow integration), Splunk (SIEM/log analytics), Crowdstrike (Falcon Discover for IoT) and TxOne (OT endpoint protection)
  • Conduct security acceptance testing and validation of new or updated OT systems to ensure compliance with security requirements and industry best practices.

Risk Assessment & Vulnerability Management

  • Perform consequence-based risk assessments for OT environments, utilizing methodologies such as Cyber Process Hazards Analysis (Cyber PHA) to identify, analyze, and prioritize cyber risks.
  • Lead vulnerability management efforts for OT/ICS assets, including the use of Claroty for vulnerability identification, risk scoring, and remediation planning.
  • Support clients in achieving regulatory compliance and readiness for audits related to OT/ICS cybersecurity.

Incident Response & Monitoring

  • Design and implement OT/ICS security monitoring solutions, leveraging tools such as CrowdStrike for endpoint and network monitoring, and Splunk for log aggregation and analytics.
  • Collaborate with IT and OT teams to develop and test incident response plans specific to industrial environments.
  • Integrate monitoring and alerting workflows with ServiceNow for streamlined incident management.

Governance, Policy, and Training

  • Develop and update OT/ICS cybersecurity policies, standards, procedures, and job aids.
  • Deliver training and awareness programs for client personnel, including plant operators, engineers, and third-party vendors.
  • Advise clients on governance frameworks and best practices for OT/ICS cybersecurity program development and maturity assessments.

Client Engagement & Leadership

  • Serve as a subject matter expert in client meetings, workshops, and presentations, especially regarding the deployment, integration, and optimization of OT/ICS security tools.
  • Lead project teams, mentor junior staff, and contribute to business development activities such as proposal writing and solution development.
  • Stay current on emerging OT/ICS threats, vulnerabilities, and technologies, and share insights with clients and internal teams.

The team

The Cyber Services team delivers fully managed cyber capabilities that bring together market-tested technologies, leading practices, and pre-built use cases to accelerate time to value and improve operational resilience.

Qualifications

Required:

  • Bachelor's degree in Engineering, Computer Science, Information Security, or related field.
  • 7+ years of experience in OT/ICS cybersecurity, including hands-on experience with industrial control systems (e.g., SCADA, DCS, PLCs) in sectors such as oil & gas, energy, utilities, or manufacturing.
  • 4+ years of demonstrated experience designing and implementing OT/ICS security architectures and controls using tools such as Claroty, Palo Alto, Cradlepoint, CrowdStrike, BeyondTrust PRA, and familiarity with Cisco, ServiceNow, Splunk, and TxOne.
  • Limited immigration sponsorship may be available
  • Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve.

Preferred:

  • Advanced degree preferred.
  • Professional certifications such as GICSP, CISSP, CISM, ISA/IEC 62443, or equivalent.
  • Strong knowledge of OT/ICS protocols (e.g., Modbus, DNP3, OPC, Profibus), network architectures, and common vulnerabilities.
  • Experience with cloud-based OT/ICS security solutions and IT/OT convergence initiatives.
  • Experience with OT/ICS cybersecurity technologies for asset discovery, vulnerability management, network monitoring, endpoint protection, and privileged access management.
  • Familiarity with industry standards and frameworks (e.g., NIST 800-82, IEC 62443, NERC CIP).
  • Experience conducting risk assessments, vulnerability management, and incident response in OT environments.
  • Strong communication skills, with the ability to present complex technical concepts to both technical and non-technical audiences.
  • Demonstrated leadership in project delivery and client engagement.
  • Prior consulting experience with a focus on critical infrastructure or industrial sectors.
  • Experience developing and delivering OT/ICS cybersecurity training programs.

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is 105,400 to 207,800.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.


    Qualifications:
    Cyber Operational Technology/ Industrial Control Systems (OT/ICS) Senior Consultant 

    Position Summary

    As an OT/ICS Cybersecurity Senior Consultant at Deloitte, you will play a pivotal role in designing, implementing, and optimizing cybersecurity solutions for industrial environments. You will work with clients in energy, manufacturing, utilities, and other critical infrastructure sectors to secure operational technology (OT) and industrial control systems (ICS), ensuring the safety, reliability, and resilience of their operations. You will leverage your deep technical expertise, industry knowledge, and hands-on experience with leading OT/ICS security tools to deliver innovative solutions, lead project teams, and provide strategic guidance to clients.

    Recruiting for this role ends on 12/31/2026.

    Work you'll do

    OT/ICS Security Architecture & Design

    • Lead the design and implementation of OT/ICS cybersecurity architectures, including network segmentation, secure remote access, and integration with IT security controls.
    • Develop and document security reference architectures, blueprints, and roadmaps tailored to client environments and industry standards (e.g., NIST 800-82, IEC 62443).
    • Evaluate, select, and deploy OT/ICS cybersecurity technologies, with hands-on experience in:
      • Claroty for OT asset discovery and vulnerability management
      • Palo Alto and Cradlepoint for firewall configuration, segmentation, and secure connectivity
      • CrowdStrike for OT monitoring and threat detection
      • BeyondTrust for privileged secure remote access management
      • Familiarity with other vendor tools such as Cisco (network security), ServiceNow (ticketing and workflow integration), Splunk (SIEM/log analytics), Crowdstrike (Falcon Discover for IoT) and TxOne (OT endpoint protection)
    • Conduct security acceptance testing and validation of new or updated OT systems to ensure compliance with security requirements and industry best practices.

    Risk Assessment & Vulnerability Management

    • Perform consequence-based risk assessments for OT environments, utilizing methodologies such as Cyber Process Hazards Analysis (Cyber PHA) to identify, analyze, and prioritize cyber risks.
    • Lead vulnerability management efforts for OT/ICS assets, including the use of Claroty for vulnerability identification, risk scoring, and remediation planning.
    • Support clients in achieving regulatory compliance and readiness for audits related to OT/ICS cybersecurity.

    Incident Response & Monitoring

    • Design and implement OT/ICS security monitoring solutions, leveraging tools such as CrowdStrike for endpoint and network monitoring, and Splunk for log aggregation and analytics.
    • Collaborate with IT and OT teams to develop and test incident response plans specific to industrial environments.
    • Integrate monitoring and alerting workflows with ServiceNow for streamlined incident management.

    Governance, Policy, and Training

    • Develop and update OT/ICS cybersecurity policies, standards, procedures, and job aids.
    • Deliver training and awareness programs for client personnel, including plant operators, engineers, and third-party vendors.
    • Advise clients on governance frameworks and best practices for OT/ICS cybersecurity program development and maturity assessments.

    Client Engagement & Leadership

    • Serve as a subject matter expert in client meetings, workshops, and presentations, especially regarding the deployment, integration, and optimization of OT/ICS security tools.
    • Lead project teams, mentor junior staff, and contribute to business development activities such as proposal writing and solution development.
    • Stay current on emerging OT/ICS threats, vulnerabilities, and technologies, and share insights with clients and internal teams.

    The team

    The Cyber Services team delivers fully managed cyber capabilities that bring together market-tested technologies, leading practices, and pre-built use cases to accelerate time to value and improve operational resilience.

    Qualifications

    Required:

    • Bachelor's degree in Engineering, Computer Science, Information Security, or related field.
    • 7+ years of experience in OT/ICS cybersecurity, including hands-on experience with industrial control systems (e.g., SCADA, DCS, PLCs) in sectors such as oil & gas, energy, utilities, or manufacturing.
    • 4+ years of demonstrated experience designing and implementing OT/ICS security architectures and controls using tools such as Claroty, Palo Alto, Cradlepoint, CrowdStrike, BeyondTrust PRA, and familiarity with Cisco, ServiceNow, Splunk, and TxOne.
    • Limited immigration sponsorship may be available
    • Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve.

    Preferred:

    • Advanced degree preferred.
    • Professional certifications such as GICSP, CISSP, CISM, ISA/IEC 62443, or equivalent.
    • Strong knowledge of OT/ICS protocols (e.g., Modbus, DNP3, OPC, Profibus), network architectures, and common vulnerabilities.
    • Experience with cloud-based OT/ICS security solutions and IT/OT convergence initiatives.
    • Experience with OT/ICS cybersecurity technologies for asset discovery, vulnerability management, network monitoring, endpoint protection, and privileged access management.
    • Familiarity with industry standards and frameworks (e.g., NIST 800-82, IEC 62443, NERC CIP).
    • Experience conducting risk assessments, vulnerability management, and incident response in OT environments.
    • Strong communication skills, with the ability to present complex technical concepts to both technical and non-technical audiences.
    • Demonstrated leadership in project delivery and client engagement.
    • Prior consulting experience with a focus on critical infrastructure or industrial sectors.
    • Experience developing and delivering OT/ICS cybersecurity training programs.

    The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licens...

    What Deloitte employees say

    Pay

    Benefits

    Hours and flexibility

    Workplace

    Get the full story on Breakroom

    Apply