Information Security Consultant (OT)

Waterstons Limited; Glasgow; On-site; GBP 50,000 - 75,000; Full time

Benefits offered by this job

Unlimited holidays

Private healthcare

EV car scheme (salary sacrifice)

Sponsored training

Flexible working

Wellbeing programmes

Job summary

Waterstons Limited is seeking an Information Security Consultant with at least three years of OT/ICS security experience. You will help clients understand and improve the security of their industrial systems and environments, working with senior consultants on security assessments, governance activities and advisory engagements in the energy sector.

The role involves travel to client sites around Glasgow, with opportunities for flexible and hybrid working while delivering practical security

Qualifications

• Experience with OT architecture and industrial control environments.
• Knowledge of security risk methodologies and threat/vulnerability identification.
• Familiarity with ISO 27001, NIST, IEC 62443, and the NCSC Cyber Assessment Framework.
• Understanding of UK cyber security regulations in energy/utilities is beneficial.

Responsibilities

• Deliver OT cyber security assessments and reviews for multiple clients.
• Conduct OT and ICS risk assessments and contribute to security governance activities.
• Participate in security architecture reviews and secure-by-design evaluations.
• Produce high-quality client reports and deliverables across projects.
• Support workshops, interviews, and stakeholder meetings with clients.
• Develop practical recommendations with colleagues to improve security postures.
• Maintain knowledge of OT cyber security threats, vulnerabilities and best practices.

Skills

OT architecture

ICS security

Threats & vulnerabilities

ISO 27001 knowledge

NIST/IEC 62443 frameworks

NCSC CAF familiarity

UK GDPR understanding

Job description

Who you’ll be joining

We’re problem solvers at heart. Sometimes the answer is technology, sometimes it is strategy, and sometimes it is a strong cup of tea and a bit of thoughtful conversation. Whatever it takes, we work it out with our clients.

We’re an IT consultancy that helps organisations get the best out of their technology. That means keeping them secure and keeping the bad guys out, making sure everything works and is easy to use, and doing smart things with data and software to give their business an edge. It is important work, and we care about doing it well and for the right reasons.

Life at Waterstons is friendly, flexible and built on trust. We hire people who are curious, thoughtful and good at getting to the heart of a problem. You get support, trust and room to grow in a place that still feels human. The unlimited holidays and private healthcare are a nice touch, although most people stay because it feels like the right place to do good work with good people.

What You’ll Be Doing

As an Information Security Consultant, with a minimum of three years relevant cyber security experience specialising in Operational Technology and Industrial Control Systems, you will help clients understand and improve the security of their industrial systems and operational environments. Working alongside senior consultants and principals, you will deliver security assessments, risk reviews, governance activities and advisory engagements across the energy sector.

You’ll be helping multiple clients with different aspects of their security. The role is interesting and varied and a great opportunity for those that prefer spontaneity over routine.

The successful candidate will ideally be based within the Glasgow region or be willing and able to travel to client sites in and around Glasgow for a minimum of two to three days per week, as required by the client.

Your Day-to-Day

• Supporting and delivering OT cyber security assessments and reviews.
• Conducting OT and ICs risk assessments.
• Contributing to security architecture and secure-by-design reviews.
• Delivering assessments against frameworks such as IEC 62443, NIST CSF, NIST SP 800-82 and the NCSC CAF.
• Producing high-quality reports and client deliverables.
• Supporting workshops, interviews and stakeholder meetings.
• Working with colleagues to develop practical recommendations.
• Building and maintaining knowledge of OT cyber security threats, vulnerabilities and good practice.

What we’re looking for

If some (or most) of the following sound like you, we’d love to hear from you:

• Practical experience of OT architecture, industrial control systems, industrial automation, network segmentation and the application of recognised OT cyber security good practice.
• A basic understanding of UK cyber security legislation and regulation applicable to the energy and utilities sector, including the NIS Regulations and NCSC Cyber Assessment Framework.
• Experience enhancing security risk methodologies and conducting security risk assessments, including the identification of threats and vulnerabilities and the development of proportionate mitigation recommendations.
• Practical knowledge of ISO 27001, NIST, IEC 62443, UK GDPR and the NCSC Cyber Assessment Framework, together with experience delivering security audit and assurance activities.

Nice to have

• IEC ISA 62443 fundamental cyber security certificate.
• Experience with the Cyber Assessment Framework, NIST CSF, NIST SP 800-82, IEC ISA 99/62443 and CIS Controls.
• ISO 27001 lead auditor/implementer qualifications.
• A basic understanding of IT and OT security risks.
• Knowledge of the threat landscape.
• Security Check (SC) clearance

How We Take Care of You

As well as offering a competitive salary, we have an attractive benefits package including:

• A healthy work life balance with flexible and agile working being the norm
• Flexible holiday allowance, with a minimum of 30 days a year
• EV car scheme (salary sacrifice)
• Room to grow with supported development opportunities and sponsored training
• Enhanced family policies
• If you ever need it, company sick pay and life assurance
• Supported wellbeing with regular initiatives, an employee assistance programme and private medical insurance
• Flexible benefits such as a dental scheme, eye care support, season ticket loan and cycle to work

Due to the nature of our work and the industries we support, all colleagues are required to successfully complete appropriate background security screening. Some client engagements may require Security Check (SC) clearance, and colleagues must therefore be willing and eligible to undergo SC clearance where required.

Waterstons is committed to creating an inclusive, understanding, and flexible place to work. We value diversity, equality and inclusion and encourage everyone to 'bring their whole selves' to work. We believe that a company that works to truly embrace and value diversity, create an environment where everyone from any background can do their best work, and feel valued and appreciated is a better company to work for.

Privacy Statement

Waterstons are gathering the data in this application for the purpose of recruitment and to ensure we can contact you regarding this application. For information about what we do with your personal data see our Privacy Notice.