We are seeking an experienced OT Security Consultant to support the delivery of cyber security initiatives across complex Operational Technology (OT) environments.
The successful candidate will play a key role in identifying security risks, strengthening OT security controls and supporting the implementation of cyber security frameworks across industrial systems and critical infrastructure.
Key Responsibilities
- Conduct comprehensive OT cyber security risk assessments, security reviews and gap analyses.
- Assess and improve security controls across SCADA, I C S, P L C, D C S and industrial control environments.
- Design and implement OT security strategies, architectures and remediation roadmaps.
- Perform OT vulnerability assessments and identify potential threats across industrial networks.
- Develop and maintain OT cyber security policies, standards, procedures and governance frameworks.
- Support compliance with IEC 62443, NIST CSF, ISO 27001 and relevant industry regulations.
- Provide technical guidance on OT network segmentation, firewalls, secure remote access and access management.
- Review existing OT architectures and recommend improvements to strengthen security posture.
- Support OT asset discovery, asset inventory management and security classification.
- Conduct security maturity assessments and develop actionable recommendations.
- Assist with OT incident response planning, cyber resilience and disaster recovery strategies.
- Identify and assess third-party and vendor security risks within OT environments.
- Support the implementation of OT security monitoring, threat detection and vulnerability management solutions.
- Collaborate with engineering, infrastructure, operations and cyber security teams to ensure security requirements are embedded into operational environments.
- Prepare technical documentation, security assessment reports, risk registers and remediation plans.
- Engage with business stakeholders to communicate security risks, findings and recommendations.
Skills & Experience
- Demonstrated experience in OT/ICS cyber security consulting, engineering or security architecture.
- Strong understanding of Operational Technology environments, including SCADA, I C S, P L C and D C S systems.
- Experience conducting OT security risk assessments, security audits and vulnerability assessments.
- Strong knowledge of IEC 62443, NIST CSF, ISO 27001 and relevant OT security frameworks.
- Understanding of industrial communication protocols such as Modbus, DNP3, OPC UA and IEC 60870-5-104.
- Experience with OT network security, segmentation, firewalls and secure remote access solutions.
- Knowledge of OT asset discovery, vulnerability management and security monitoring technologies.
- Familiarity with OT security platforms such as Claroty, Nozomi Networks or Microsoft Defender for IoT.
- Experience developing OT security strategies, policies, standards and security improvement roadmaps.
- Understanding of Australian critical infrastructure regulations, including the SOCI Act.
- Experience supporting OT security incident response, threat modeling and cyber resilience initiatives.
- Knowledge of IT/OT convergence and the security challenges associated with interconnected environments.
- Experience working across utilities, energy, water, manufacturing, transport or critical infrastructure environments.
- Ability to translate complex technical security risks into practical business recommendations.
- Strong stakeholder engagement, communication and technical documentation skills.
- Relevant certifications such as GICSP, CISSP, CISM or IEC 62443 qualifications will be highly regarded.
What's on Offer
- Opportunity to work on complex OT cyber security initiatives.
- Exposure to critical infrastructure and industrial technology environments.
- Work alongside experienced cyber security, engineering and operational teams.
- Contribute to improving the security and resilience of essential operational systems.
Be careful - Don’t provide your bank or credit card details when applying for jobs. Don't transfer any money or complete suspicious online surveys. If you see something suspicious, report this job ad.