OT Cyber Security Architect: Secure Industrial Operations

PA Consulting Group; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Health and lifestyle perks for you and

25 days annual leave

Generous pension scheme

Community involvement

Annual performance bonus

PA share ownership

Cycle to work

Give as you earn

Job summary

PA Consulting is seeking an OT Cyber Security Architect to lead design and delivery of secure OT environments across complex operations. You will work with senior stakeholders, engineers, and regulators to translate cyber risk into practical security outcomes.

Hybrid work with client site and PA offices, frequent collaboration across teams, and focus on resilience, safety and operational efficiency in critical infrastructure.

Qualifications

• Strong professional experience designing OT security architectures in critical infrastructure, manufacturing, or energy sectors.
• Experience applying IEC 62443, NIST CSF, NCSC CAF, ISO 27001, NIS/NIS2.
• Proven ability to translate cyber risk into architecture decisions and roadmaps.
• Excellent communication with senior security leaders and engineering teams.

Responsibilities

• Architect and design secure OT environments aligned to global standards and regulation.
• Translate cyber risk assessments into target-state architectures and roadmaps.
• Define secure integration patterns between IT and OT environments.
• Lead OT security transformation workstreams, including remote access and vulnerability management.
• Advise leaders on OT risk, resilience, and investment priorities.

Skills

OT security architectures

Industrial control systems

OT networks

IEC 62443

NIST CSF

NCSC CAF

ISO 27001

Risk translation

Stakeholder engagement

Clear guidance

Education

Industrial cybersecurity/engineering degree

Job description

PA Consulting is seeking an OT Cyber Security Architect to lead design and delivery of secure OT environments across complex operations. You will work with senior stakeholders, engineers, and regulators to translate cyber risk into practical security outcomes.

Hybrid work with client site and PA offices, frequent collaboration across teams, and focus on resilience, safety and operational efficiency in critical infrastructure.