Cyber Incident Responder - OT Technology

Harrington Starr; West Midlands; On-site; GBP 90,000 - 130,000; Full time

Job summary

Harrington Starr is seeking an OT/IoT Security Lead to build and lead the organization's OT/IoT security capability from the ground up. You will define strategy, roadmap, and operating model, owning governance, tooling and incident response for OT/IoT environments.

You will work cross-functionally with Threat Intelligence, Incident Response, Vulnerability Management, GRC and Security Architecture, collaborating with engineering and site teams to embed pragmatic security controls.

Qualifications

• OT/IoT security certifications required.
• Deep understanding of OT/IoT technologies, architectures, threats and controls.
• Experience building a security capability from scratch.
• Knowledge of IEC 62443, NIST CSF, and NIST SP 800-82.
• Experience applying the Purdue model in manufacturing/engineering contexts.

Responsibilities

• Build and lead OT/IoT security capability from ground up.
• Define OT/IoT security strategy, roadmap, operating model, and priorities.
• Create and maintain an accurate inventory of OT/IoT assets and dependencies.
• Identify security risks, control gaps and vulnerabilities in OT/IoT environments.
• Lead procurement and integration of OT/IoT security technologies and services.
• Develop OT/IoT security policies, governance processes and monitoring.
• Translate threat intelligence into actionable detection and mitigation requirements.
• Partner with IT, engineering, site leads and stakeholders.
• Define metrics and report on OT/IoT risk, performance and maturity.

Skills

OT/IoT security certifications

IEC 62443 / NIST CSF knowledge

Purdue model experience

Project management

Job description

About the Role

Our client is looking for an OT/IoT Security Lead to build and lead their Operational Technology and IoT security capability from the ground up. This is a foundational role within a well-established Security Operations function, offering genuine ownership over strategy, tooling, governance and incident response for OT/IoT environments.

You'll work cross-functionally with Threat Intelligence, Incident Response, Vulnerability Management, GRC and Security Architecture, as well as engineering and site teams, to embed proportionate, pragmatic security controls across operational environments — while also playing a key role in incident response when OT/IoT-related incidents occur.

Key Responsibilities

• Build and develop the organisation's OT/IoT security capability from the ground up
• Define the OT/IoT security strategy, roadmap, operating model and delivery priorities
• Create and maintain an accurate inventory of OT/IoT assets, systems, software and dependencies
• Identify security risks, control gaps and vulnerabilities across operational environments
• Evaluate, recommend and support procurement of OT/IoT security technologies and services
• Lead implementation, integration and ongoing management of selected security solutions
• Develop OT/IoT security policies, standards, procedures and governance processes
• Establish security monitoring use cases, alerting requirements and detection coverageTune security controls to improve detection while reducing false positives
• Define secure configuration, network segmentation, access control and remote-access requirements
• Lead OT/IoT vulnerability identification, assessment, prioritisation and remediation
• Support incident preparation, investigation, containment, recovery and lessons-learned activities
• Translate threat intelligence into actionable detection, prevention and mitigation requirements
• Partner with IT, engineering, site leads, asset owners, suppliers and business stakeholders
• Assess new projects, technologies and architectural changes for OT/IoT security risk
• Define metrics and provide regular reporting on OT/IoT security risk, performance and maturity
• Support audits, regulatory obligations and continuous improvement initiatives

About You

• Relevant security certifications in OT/IoT or closely related areas of Security Operations
• Deep understanding of OT/IoT technologies, architectures, protocols, threats and controls
• Proven experience building a security capability, service or function from the ground up
• Strong knowledge of IEC 62443, NIST CSF and NIST SP 800-82
• Practical experience applying the Purdue model within manufacturing/engineering organisations
• Working knowledge of project management principles
• Willingness to travel internationally as required
• Comfortable operating within incident response processes, including on-call/escalation involvement during security incidents

Why Apply

This is a unique opportunity to shape an entire security function from day one, with real influence over tooling, strategy and how OT/IoT risk is managed across the business — working alongside experienced Security Operations, GRC and Architecture teams.