OT/ IoT Cyber Security Specialist\\ Lead

Harrington Starr; Birmingham; On-site; GBP 110,000 - 140,000; Full time

Job summary

Harrington Starr is seeking an OT/IoT Security Lead to build and lead a new security capability for OT/IoT environments. You will own strategy, tooling, governance and incident response within a mature Security Operations function.

You will work across Threat Intelligence, Incident Response, Vulnerability Management, GRC and Architecture, embedding pragmatic controls with site teams and engineering to protect critical assets and support incident response when events occur.

Qualifications

• Security certifications in OT/IoT or related areas.
• Deep understanding of OT/IoT technologies, architectures, protocols and controls.
• Proven experience building a security capability from the ground up.
• Strong knowledge of IEC 62443, NIST CSF and NIST SP 800-82.
• Willingness to travel internationally.

Responsibilities

• Build and develop the OT/IoT security capability from the ground up.
• Define strategy, roadmap, operating model and delivery priorities.
• Create and maintain an inventory of OT/IoT assets and dependencies.
• Identify risks, gaps and vulnerabilities across operations.
• Lead procurement and deployment of OT/IoT security technologies.
• Oversee implementation and ongoing management of security solutions.
• Develop policies, standards and governance for OT/IoT security.
• Establish monitoring use cases, alerts and detection coverage.
• Tune controls to improve detection and reduce false positives.
• Define secure config, network segmentation and access controls.
• Lead vulnerability identification, assessment and remediation.
• Support incident preparation, containment and lessons learned.
• Translate threat intel into actionable requirements.
• Collaborate with IT, engineering and site stakeholders.
• Assess new projects for OT/IoT security risk.
• Define metrics and report risk, performance and maturity.
• Support audits and continuous improvement initiatives.

Skills

OT/IoT security

Threat intelligence

Incident response

NIST CSF

IEC 62443

Purdue model

Security governance

Threat modelling

Cross-functional leadership

Education

OT/IoT security certifications

Job description

Our client is looking for an OT/IoT Security Lead to build and lead their Operational Technology and IoT security capability from the ground up. This is a foundational role within a well-established Security Operations function, offering genuine ownership over strategy, tooling, governance and incident response for OT/IoT environments.

You’ll work cross-functionally with Threat Intelligence, Incident Response, Vulnerability Management, GRC and Security Architecture, as well as engineering and site teams, to embed proportionate, pragmatic security controls across operational environments — while also playing a key role in incident response when OT/IoT-related incidents occur.

Key Responsibilities

• Build and develop the organisation's OT/IoT security capability from the ground up
• Define the OT/IoT security strategy, roadmap, operating model and delivery priorities
• Create and maintain an accurate inventory of OT/IoT assets, systems, software and dependencies
• Identify security risks, control gaps and vulnerabilities across operational environments
• Evaluate, recommend and support procurement of OT/IoT security technologies and services
• Lead implementation, integration and ongoing management of selected security solutions
• Develop OT/IoT security policies, standards, procedures and governance processes
• Establish security monitoring use cases, alerting requirements and detection coverage
• Tune security controls to improve detection while reducing false positives
• Define secure configuration, network segmentation, access control and remote-access requirements
• Lead OT/IoT vulnerability identification, assessment, prioritisation and remediation
• Support incident preparation, investigation, containment, recovery and lessons-learned activities
• Translate threat intelligence into actionable detection, prevention and mitigation requirements
• Partner with IT, engineering, site leads, asset owners, suppliers and business stakeholders
• Assess new projects, technologies and architectural changes for OT/IoT security risk
• Define metrics and provide regular reporting on OT/IoT security risk, performance and maturity
• Support audits, regulatory obligations and continuous improvement initiatives

About You

• Relevant security certifications in OT/IoT or closely related areas of Security Operations
• Deep understanding of OT/IoT technologies, architectures, protocols, threats and controls
• Proven experience building a security capability, service or function from the ground up
• Strong knowledge of IEC 62443, NIST CSF and NIST SP 800-82
• Practical experience applying the Purdue model within manufacturing/engineering organisations
• Working knowledge of project management principles
• Willingness to travel internationally as required
• Comfortable operating within incident response processes, including on-call/escalation involvement during security incidents

Why Apply

This is a unique opportunity to shape an entire security function from day one, with real influence over tooling, strategy and how OT/IoT risk is managed across the business — working alongside experienced Security Operations, GRC and Architecture teams.