Develop security requirements, architecture, and design for complex OT systems
Develop cyber security assessment approaches
Specify and implement a robust security risk management process
Support accreditation activities with the client and regulating authorities
Conduct security reviews and risk assessments in accordance with NCSC CAF, IEC 62443, etc.
Provide technical assistance to business development
Maintain familiarity with legislation and regulations of relevance
Build and maintain relationships with internal and external stakeholders

Demonstrable experience in similar roles or transferable skills within a similar role
Familiarity with IEC 62443 and awareness of IEC 62351 for securing power-system comms (e.g., IEC 61850, IEC 60870-5-104)
Certified Information Systems Security Professional (CISSP) and SANS Global Industrial Cyber Security Professional (GICSP) would be a plus
Able to travel to the client sites as and when required
Cyber Security work experience (with a significant focus on Operational Technology during that time)
Practical experience of IT and OT cyber security risk/threat assessment approaches
Understanding of design considerations with emphasis on operational safety and the availability/security of operating environments
Understanding of cyber resilience plans and re-opener submissions under Ofgem price controls
Working knowledge and hands-on experience in a variety of operating systems and Operational Technology environments
Experience of security engineering and associated solutions (Endpoint Protection, IDS/IPS, Firewalls, etc.) for IT and OT environments
Working knowledge and understanding of networking technologies including architectures, key components, and common IT/OT protocols
Standards, frameworks, and regulatory experience including – NCSC CAF, EU NIS Directive, ISA/IEC 62443 Series, ISO 27000 Series, NIST Cyber Security Framework (CSF), and supplementary guidance

Operational Technology Cyber Security Consultant – All Levels

Key skills