OT Cybersecurity Consultant con Inglés

Azertium IT; España; On-site; EUR 50,000 - 70,000; Full time

Job summary

Azertium IT is seeking an OT Cybersecurity Consultant to join the central CISO team and bolster the security of global industrial systems. You will work with the OT Cybersecurity Center of Excellence to implement policies, architectures, and risk mitigations across production environments.

The role requires 3–5 years in OT security, familiarity with ISA/IEC 62443 and CSF, and strong English communication. You will collaborate with plant operators, site managers, and IT teams to enable safe,

Qualifications

• Bachelor’s degree in Cybersecurity, IT or related field.
• 3–5 years OT security experience in industrial environments.
• Familiarity with ISA/IEC 62443 and CSF.
• NIS2 awareness is a plus; strong cross‑functional communication.
• Self‑starter capable in a decentralized setting.
• Fluency in English (written and spoken) is required.

Responsibilities

• Support deployment of OT Cyber Roadmap from PoC to operations across sites.
• Conduct structured ICS risk assessments and propose pragmatic mitigations.
• Help define and improve OT security policies aligned with CSF and ISA/IEC 62443.
• Collaborate on asset management, patching, backup, and SDLC for industrial projects.
• Contribute to OT Center of Excellence and drive best practices.

Skills

OT security

ICS/OT

NIST CSF

ISA/IEC 62443

Risk management

Vulnerability assessments

Stakeholder management

English proficiency

Education

Bachelor's degree in Cybersecurity

Job description

As an OT Cybersecurity Consultant, you will be a key member of the central CISO team, reporting directly to the Corporate Cybersecurity OT Lead. In this role, you will actively contribute to securing the safety, continuity, and cyber resilience of our global industrial systems and manufacturing processes. You will collaborate closely with the OT Cybersecurity Center of Excellence (CCoE) to implement robust security policies, architectures, and risk mitigation strategies across our production environments.

Responsibilities

• Roadmap Execution & Capability Deployment: Participate actively in the deployment of the company’s OT Cyber Roadmap, supporting initiatives from the proof-of-concept (PoC) phase through to final implementation and operational handover to site production teams.
• Risk Management & Vulnerability Assessments: Perform structured risk assessments on industrial control systems (ICS) to identify technical and procedural vulnerabilities. Evaluate potential operational risks and recommend pragmatic, cost-effective mitigation measures.
• Standards & Framework Governance: Assist in the definition, creation, and continuous improvement of corporate OT Security policies and standards, ensuring strict alignment with the NIST Cybersecurity Framework (CSF) and ISA/IEC 62443 standards.
• Operational Security Processes: Collaborate with cross-functional teams to design, implement, and audit core OT-specific security processes, including asset management, patch management, backup & recovery, and Secure Development Lifecycle (SDLC) for industrial projects.
• OT Center of Excellence Collaboration: Act as an active contributor within the OT Cybersecurity Center of Excellence, sharing knowledge, evaluating emerging industrial security technologies, and driving engineering best practices.
• Awareness & Culture: Develop, maintain, and deliver tailored OT cybersecurity awareness and training programs for plant operators, engineers, and local site managers to foster a strong safety-first cyber culture.

Required Skills & Qualifications

• Education: Bachelor’s degree in Cybersecurity, Information Technology or a related technical field.
• Experience: 3 to 5 years of professional experience specifically within the field of Operational Technology (OT) security, industrial automation, or critical infrastructure protection.
• Standards Knowledge: Practical exposure to industrial security standards, specifically ISA/IEC 62443 and the NIST Cybersecurity Framework (CSF).
• Regulatory & Compliance Knowledge: Strong awareness or operational understanding of the NIS2 Directive; while not mandatory, knowledge of its requirements and impact on industrial operations is highly valuable.
• Soft Skills & Independence: Demonstrated ability to work proactively and independently in a highly decentralized environment, comfortably managing and collaborating with diverse stakeholders (from plant floor operators to corporate IT teams).
• Languages: Full professional fluency in English (both written and spoken) is mandatory, with the ability to draft corporate-level technical documentation and governance policies.

Preferred & Highly Recommended Qualifications

• Professional Certifications: Industrial cybersecurity certifications such as ISA/IEC 62443 Fundamentals/Specialist, GICSP (Global Industrial Cyber Security Professional), or equivalent credentials.
• Technical Familiarity: Hands‑on understanding of common industrial systems (PLCs, HMIs, SCADA, DCS) and major automation vendors (e.g., Siemens, Rockwell Automation).
• Network Security: Basic understanding of industrial network segmentation (Purdue Model), industrial protocols (Modbus, Profinet, OPC UA), and secure remote access architectures.