OT Cyber Security Consultant

Investigo; United Kingdom; Remote; GBP 75,000 - 90,000; Full time

Job summary

Investigo is sourcing an OT security consultant for the energy sector. The role focuses on real-world, physical infrastructure security of SCADA, DCS, PLCs and RTUs. You will design and assess security architectures following OT standards and translate risk into practical actions for clients.

Role is largely remote with occasional travel; client-facing work is core, not merely slides. Expect tackling challenging OT security problems with a straightforward, no-nonsense approach.

Qualifications

• Solid OT security chops and knowledge of industrial networks.
• Familiarity with OT security standards such as NIST CSF, ISO 27001/27005, NERC CIP, IEC 62443.

Responsibilities

• Tackle industrial control and OT cyber challenges in environments like SCADA, DCS, PLCs and RTUs.
• Design and assess security architecture in line with relevant OT standards.
• Work with energy clients to translate risk into actionable security measures.
• Help clients achieve genuine security, not just compliance.
• Engage with clients face-to-face when required, sometimes on-site.

Skills

OT security

Industrial networks

Job description

Location - UK wide - Largely remote with some very occasional travel

Sector - Energy

Salary - Ideally around the £80,000 mark but happy to have an adult conversation about it.

Security Clearance - Must be SC cleared (or eligible) minimum!

Let’s skip the part where we pretend you haven’t seen 17 other roles like this today.

Here’s what’s different:

This isn’t some generic cyber gig stuck in a dark corner of IT. This is OT. Real-world, physical infrastructure, where a misconfigured PLC doesn’t just crash a dashboard - it shuts down half the power grid.

That’s what you’ll be dealing with here.

It’s consulting, yes - but not the kind that’s all slide decks and no substance.

Here’s what you’ll actually do:

• Tackle industrial control and OT cyber challenges in environments like SCADA, DCS, PLCs and RTUs
• Design and assess security architecture in line with standards like NIST CSF, ISO 27001/27005, NERC CIP, IEC 62443 and all the other acronyms we pretend to love
• Work with energy clients
• Translate risk into action. No hiding behind jargon
• Help clients get their OT security sorted - not just compliant, but actually secure

This role isn’t for someone who wants to coast. You’ll be client-facing, working on things that matter. Sometimes on-site, though very rarely. It varies - this is consulting, not clock-watching.

What’s in it for you?

• Projects that don’t all look the same
• Room to grow technically without being pushed onto a management track if that’s not your thing
• Actual budget for training and certifications
• A team that values curiosity and straight talk over buzzwords and waffle

You don’t need to tick every box. If you’ve got solid OT security chops and know your way around industrial networks, let’s talk.