Cyber Security Analyst

Morson Group; Capenhurst; Hybrid; GBP 111,000 - 120,000; Full time

Job summary

Morson Group is seeking an OT Cyber Security Analyst to support an ongoing Cyber Security Enhancement Programme within a highly regulated environment. This hands-on role focuses on cyber risk assessments, gap analyses and reviewing existing security controls.

You will work with site teams, engineering and information security stakeholders to identify risks and support practical improvements across operational environments.

Qualifications

• Hands-on cyber security analyst with risk assessment experience.
• Experience reviewing security controls and identifying gaps.
• Familiarity with OT/industrial environments and related standards.
• Strong ability to document findings for technical and non-technical stakeholders.

Responsibilities

• Conduct cyber security risk assessments and gap analyses against standards and frameworks.
• Review existing cyber security controls and identify gaps or weaknesses.
• Support prioritisation and management of cyber risks with remediation recommendations.
• Assess compliance against frameworks such as ISO 27001, NIST, IEC 62443 or NIS CAF.
• Collaborate with engineering, operational and information security teams on security requirements.
• Develop and improve cyber security procedures and documentation.
• Review configurations and security arrangements; provide improvement recommendations.
• Track remediation activities and ensure risks are addressed.
• Produce clear assessment findings and risk reports for stakeholders.

Skills

Cyber security

Risk assessment

Gap analysis

Stakeholder engagement

Job description

Cyber Security Analyst OT - £600 -£650 per day - Inside IR35 - 12 Month initial contract - Jan 2027 start.

Hybrid Working - 3 Days Per Week Onsite near Capenhurst - SC Clearance Eligibility Required

We are looking for an OT Cyber Security Analyst to support an ongoing Cyber Security Enhancement Programme within a highly regulated environment.

This is a hands-on role with a strong focus on cyber risk assessments, gap analysis and the review of existing security controls. Working closely with site teams, engineering and information security stakeholders, you will help identify security risks, assess current controls and support the delivery of practical improvements across operational environments.

You dont need to be an OT specialist. We are particularly interested in candidates with a solid cyber security background who have experience working with, or exposure to, Operational Technology (OT) environments.

Key Responsibilities -

• Conduct cyber security risk assessments and gap analyses against established security standards and frameworks.
• Review existing cyber security controls, assessing where and how they have been implemented and identifying potential gaps or weaknesses.
• Support the identification, prioritisation and management of cyber risks, recommending appropriate remediation and mitigation measures.
• Assess compliance against relevant security frameworks, including NIS CAF and IEC 62443.
• Work with engineering, operational and information security teams to review security requirements across existing systems and new projects.
• Support the development and improvement of cyber security procedures, processes and associated documentation.
• Review technical configurations and security arrangements, providing recommendations to strengthen existing controls.
• Track remediation activities and work with relevant stakeholders to ensure identified risks are appropriately addressed.
• Produce clear assessment findings, risk reports and recommendations for technical and non-technical stakeholders.

Experience Required -

• Previous experience in a cyber security analyst, cyber risk, security assurance or similar role.
• Practical experience conducting cyber security risk assessments and gap analyses.
• Good understanding of cyber security controls, their application and how to assess their effectiveness.
• Experience identifying security weaknesses and recommending proportionate risk mitigation measures.
• Experience working with, or exposure to, OT or industrial environments. Deep technical OT expertise is not essential.
• Familiarity with recognised cyber security standards and frameworks such as ISO 27001, NIST, IEC 62443 or NIS CAF.
• Strong stakeholder engagement skills, with the ability to work across technical, engineering and operational teams.
• Ability to clearly document assessment findings and communicate security risks and recommendations.

Security Clearance & Working Arrangements -

Candidates must be eligible to obtain SC clearance. Priority will be given to those who currently hold or have previously held SC clearance.
The role requires an onsite presence of three days per week, working closely with site-based engineering, operational and cyber security teams.
This is an excellent opportunity for a cyber security professional looking to build on their existing OT exposure while contributing to a significant security improvement programme within a critical infrastructure environment.