About This Role
This OT security role involves assessing operational technology environments and managing client engagements focused on securing industrial control systems. It suits a candidate with expertise in OT security principles and frameworks, capable of coordinating with engineering and operations teams to uplift security controls.
Responsibilities
- Assess OT environments and recommend pragmatic network segmentation and monitoring strategies tailored to operational constraints
- Manage numerous engagements, primarily focused on helping organisations secure their industrial control systems and operational technology infrastructure
- Coordinate with engineering and operations teams to uplift security controls without introducing downtime or safety risks to production environments
- Maintain OT asset visibility and inventory accuracy to support risk management and compliance requirements
- Support incident triage and response activities for OT systems, ensuring timely detection and containment of threats
- Conduct OT security maturity assessments against industry-leading frameworks (such as IEC 62443, NIST CSF, NERC CIP, etc.) to identify gaps and recommend improvements
- Collaborate with clients to understand their operational priorities and risk tolerance, ensuring all engagements are delivered to the highest quality and professional standards
- Stay informed about emerging OT threats, vulnerabilities, and security technologies, and incorporate this knowledge into client recommendations
- Provide Subject Matter Expertise on OT security best practices and regulatory requirements to clients across various sectors
Requirements
- Bachelor's degree in Computer Science, Engineering, Information Security, or a related field
- Minimum of 3 years of experience delivering OT/ICS security projects, including environment assessments, segmentation design, and control uplift initiatives
- Proven track record of successfully executing complex projects within consulting or professional services environments
- In-depth understanding of OT security principles and domains (such as SCADA, DCS, PLC environments, Purdue Model, and IT/OT convergence)
- Excellent communication skills, both written and verbal, with the ability to explain complex technical concepts to non-technical stakeholders
- Strong analytical and problem-solving skills, with the ability to work collaboratively in a dynamic and diverse team environment
- Demonstrated capability to manage multiple projects concurrently and adhere to deadlines
Nice to have:
- Master's degree
- Strong knowledge of OT security frameworks and standards (such as IEC 62443, NIST CSF, NERC CIP)
- Familiarity with OT security monitoring platforms and tools (such as Claroty, Nozomi Networks, Dragos, or Microsoft Defender for IoT)
