Information Technology Security Manager

The Planet Group; England; Remote; GBP 70,000 - 90,000; Full time

Job summary

A global manufacturing organization is seeking an experienced OT Security Manager to lead the OT security operating model. This remote, full-time role entails developing security policies, managing compliance support, and ensuring incident readiness across manufacturing environments. Candidates should possess proven expertise in Cyber Security within OT, alongside strong communication and stakeholder management skills. The position offers the chance to influence critical security practices and requires a degree in a relevant discipline.

Qualifications

• Proven experience in Cyber Security management, specifically within an OT environment.
• Strong understanding of relevant security frameworks and standards for OT.
• Strong stakeholder management across Engineering/Operations and IT.

Responsibilities

• Establish and manage the OT security operating model.
• Develop and manage OT security policies and procedures.
• Maintain an OT risk register and site-level risk documentation.

Skills

Cyber Security management

Stakeholder management

Analytical skills

Problem-solving skills

Vendor management

Written communication

Verbal communication

Education

Degree in a relevant discipline

Tools

SIEM/SOC

IEC 62443

NIST 800-82

Job description

The Planet Group have recently been engaged by a global manufacturing organisation who service the Industrial, Aerospace, Defence and Transportation markets. We are looking for an experienced OT Security Manager (Operational Technology) to join the team remotely on a permanent basis.

Position Overview:

The OT Security Manager is responsible for establishing and managing the organisation’s OT security operating model across manufacturing and engineering environments where downtime, safety, and regulatory compliance are critical risks. The role focuses on governance, security controls, remediation initiatives, and integrating OT monitoring and incident response with central security operations, while also supporting assurance and evidence for regulated requirements.

The position covers OT/ICS security across manufacturing networks and related systems (e.g., OT endpoints, PLC/SCADA/MES interfaces) and provides risk-based oversight, security architecture guidance, and governance, without replacing site engineering ownership or acting as a general IT operations role.

Duties & Responsibilities:

• OT Security Governance: Define and implement the OT security operating model, including standards, RACI, and escalation paths, in partnership with Engineering and Operations.
• Strategy & Design: Develop and manage OT security policies, procedures, and strategies aligned with organisational goals, industrial standards, and regulatory requirements.
• OT Risk Management: Maintain an OT risk register and site-level risk documentation, ensuring risks are tracked, owned, and escalated appropriately.
• Asset Management: Build and maintain OT asset inventories, classification, and criticality mapping, with defined ownership and maintenance responsibilities.
• Vulnerability Management: Apply OT-specific vulnerability management practices, including safe patching, compensating controls, and change validation.
• Segmentation & Boundary Controls: Implement and assure IT/OT network segmentation, access controls, and remote access policies in collaboration with site teams.
• Secure Architecture & Change Governance: Provide security input to architecture and change processes to ensure plant-impacting changes are safely assessed, scheduled, and executed.
• Monitoring & Incident Readiness: Integrate OT monitoring with the SOC, define detections and incident runbooks, conduct tabletop exercises, and track follow-up actions.
• Recovery & Resilience: Establish expectations for OT backup and recovery, supporting resilience planning for critical systems.
• Compliance Support: Assist with Defence and corporate compliance for OT (e.g., DEFCON, CSM, CE+, CMMC), focusing on control implementation and evidence.
• Limited IT Assurance: Perform OT-relevant control checks and evidence validation, coordinating with IT GRC/PMO on agreed controls.
• Mentoring & Team Development: Guide and mentor team members to achieve individual and team objectives.
• Documentation & Communication: Produce OT security standards, procedures, and site guidance in practical, stakeholder-friendly language.

Key Requirements:

• Proven experience in Cyber Security management, specifically within an OT environment.
• Strong understanding of relevant security frameworks and standards, and ability to translate them into practical OT controls and evidence.
• Strong stakeholder management across Engineering/Operations and IT; ability to drive adoption without disrupting production.
• Excellent analytical, problem-solving, and decision-making skills.
• Vendor management and delivery oversight experience.
• Strong written and verbal communication skills, including producing clear technical and process documentation.
• Degree qualified in a relevant discipline.
• Knowledge of OT-focused standards (e.g., IEC 62443, NIST 800-82) and experience supporting regulated Defence environments.
• Experience integrating OT telemetry into SIEM/SOC and developing OT detections and playbooks.
• Experience with assurance/control testing approaches and evidence pack preparation.

If you would like to find out more, please apply in the first instance.

We are an equal opportunities Recruitment Business and Agency. We welcome applications from all suitably qualified candidates regardless of their race, sex, disability, religion/belief, sexual orientation or age.

Each company within the Planet Equity Group is a “data controller” Full details regarding how we hold your data is available within our Privacy Notice accessible at our website. #TECH