OT Cyber Security Analyst: Risk & Controls Lead

Morson Group; England; Hybrid; GBP 111,000 - 120,000; Full time

Job summary

Morson Group seeks an OT Cyber Security Analyst to support a Cyber Security Enhancement Programme in a regulated environment. The role focuses on cyber risk assessments, gap analysis, and reviewing existing security controls across operational technology settings.

You will work with site teams, engineering and information security to identify risks and deliver practical improvements. Experience with OT environments is preferred but not essential; strong cyber security background and ability to

Qualifications

• Previous experience as a cyber security analyst or risk/assurance role.
• Proven ability to perform cyber risk assessments and gap analyses.
• Understanding of cyber security controls and effectiveness.
• Experience in OT or industrial environments preferred but not required.
• Familiarity with ISO 27001, NIST, IEC 62443 or NIS CAF.
• Strong stakeholder engagement and clear risk reporting.

Responsibilities

• Conduct cyber security risk assessments and gap analyses against standards.
• Review existing controls and identify gaps or weaknesses.
• Support identification and management of cyber risks with remediation plans.
• Assess compliance against frameworks like NIS CAF and IEC 62443.
• Collaborate with engineering and security teams on requirements.
• Help develop and improve cyber security procedures and documentation.
• Review configurations and provide recommendations to strengthen controls.
• Track remediation activities and report findings to stakeholders.
• Produce clear assessment findings and risk reports for technical and non-technical audiences.

Skills

Cyber risk assessment

Gap analysis

Security controls review

OT environments

Stakeholder engagement

Documentation & reporting

Tools

ISO 27001

NIST

IEC 62443

NIS CAF

Job description

Morson Group seeks an OT Cyber Security Analyst to support a Cyber Security Enhancement Programme in a regulated environment. The role focuses on cyber risk assessments, gap analysis, and reviewing existing security controls across operational technology settings.

You will work with site teams, engineering and information security to identify risks and deliver practical improvements. Experience with OT environments is preferred but not essential; strong cyber security background and ability to