ACP Compliance Analyst - Asset Administrator in Chennai, भारत

Dear Aspirant!

We empower our people to stay resilient and relevant in a constantly changing world. We’re looking for people who are always searching for creative ways to grow and learn. People who want to make a real impact, now and in the future. Does that sound like you? Then it seems like you’d make a great addition to our vibrant international team.

We are looking for: Data Analyst - ACP Compliance Analyst – Asset Administrator

You’ll make an impact by:

• Maintain the inventory of in-scope assets and ensure asset information is complete, accurate, and current.
• Support identification and classification of critical assets and maintain their assigned criticality levels based on the approved business/security assessment.
• Coordinate the ACP lifecycle from asset identification and classification through protection requirements, protection concept development, approval, and implementation monitoring.
• Coordinate collection and validation of evidence demonstrating implementation of defined protection measures.
• Prepare and maintain ACP templates, records, protection concept documentation, and associated evidence repositories.
• Prepare Risk Treatment Plans (RTPs) and coordinate tracking of identified security risks and treatment actions.
• Track exceptions, deviations, residual risks, compensating measures, and approval status in accordance with governance processes.
• Maintain asset inventories, ownership information, protection requirements, implementation status, and review history.
• Coordinate periodic ACP reviews and ensure actions are assigned, tracked, and closed within agreed timelines.
• Maintain and update operational manuals, procedures, templates, checklists, and working instructions related to ACP.
• Prepare audit evidence packages and support internal/external audits, assessments, and compliance reviews.
• Create ACP compliance metrics and dashboards covering asset coverage, evidence status, open exceptions, review status, and implementation progress.
• Coordinate with business representatives, cybersecurity specialists, governance owners, asset owners, and technical teams to resolve ACP gaps.
• Support continuous improvement of ACP processes, templates, evidence standards, and reporting.
• Support Risk Treatment Plans and exception tracking for OT assets where security remediation is constrained by legacy technology, vendor dependencies, maintenance windows, or operational requirements.
• Coordinate evidence collection for OT protection measures such as network segmentation, secure remote access, account management, hardening, monitoring, backup/recovery, and vulnerability management.
• Support identification and classification of critical OT assets based on business impact, operational criticality, security risk, and availability/safety considerations.
• Maintain and support ACP records for both IT and OT assets, including SCADA, substations, utility systems, HMI, PLC, RTU, DCS, and associated infrastructure..

Use your skills to move the world forward!

• B.E./B.Tech./MCA/M.Sc. in Computer Science, Information Technology, Cybersecurity, or a related discipline.
• 6–8 years of experience in cybersecurity governance, GRC, compliance, IT security operations, or asset/security management.
• Experience supporting audits, risk assessments, compliance programs, or security governance activities.
• Experience with cybersecurity governance and asset protection for OT/ICS environments such as SCADA, substations, utilities, HMI, PLC, RTU, DCS, or industrial control systems.
• Understanding of OT asset criticality, operational availability, safety considerations, industrial network architecture, and protection requirements.
• Working knowledge of IEC 62443 and OT/critical-infrastructure security practices is preferred.
• Ability to translate OT technical controls into ACP protection requirements, evidence expectations, residual-risk documentation, and compliance status.
• Good understanding of cybersecurity governance, asset management, risk management, and security compliance processes.
• Practical understanding of asset criticality, business impact, security risks, protection requirements, residual risk, and risk treatment.
• Experience with compliance frameworks and standards such as ISO 27001, IEC 62443, NIST CSF, CIS Controls, or equivalent.
• Experience maintaining asset inventories, compliance records, evidence repositories, and audit documentation.
• Ability to prepare Risk Treatment Plans, compliance documentation, evidence packages, and management reports.
• Strong skills in Excel and/or Power BI for compliance metrics, tracking, and dashboards.
• Experience with GRC, ticketing, asset management, or workflow platforms is desirable.
• Strong coordination, documentation, stakeholder management, and audit support skills.
• Ability to understand technical security controls and translate them into clear compliance evidence and status information.
• Certifications such as ISO 27001 Lead Implementer/Auditor, CISA, CISM, CRISC, IEC 62443, or equivalent are preferred.
• Preferred Certifications: ISO 27001 Lead Implementer/Auditor, CISA, CISM, CRISC, IEC 62443, or equivalent.

Create a better #TomorrowWithUs!

This role is based in Chennai, where you’ll get the chance to work with teams impacting entire cities, countries - and the shape of things to come.

We value your unique identity and perspective and are fully committed to providing equitable opportunities and building a workplace that reflects the diversity of society. Come bring your authentic self and create a better tomorrow with us.

We’re Siemens. A collection of over 312,000 minds building the future, one day at a time in over 200 countries. We're dedicated to equality, and we encourage applications that reflect the diversity of the communities we work in. All employment decisions at Siemens are based on qualifications, merit and business need. Bring your curiosity and imagination and help us shape tomorrow.

Find out more about Siemens careers at:

Find out more about the Digital world of Siemens here: