OT/IoT Security Lead — Build & Own Security Capability

Harrington Starr; West Midlands; On-site; GBP 90,000 - 130,000; Full time

Job summary

Harrington Starr is seeking an OT/IoT Security Lead to build and lead the organization's OT/IoT security capability from the ground up. You will define strategy, roadmap, and operating model, owning governance, tooling and incident response for OT/IoT environments.

You will work cross-functionally with Threat Intelligence, Incident Response, Vulnerability Management, GRC and Security Architecture, collaborating with engineering and site teams to embed pragmatic security controls.

Qualifications

• OT/IoT security certifications required.
• Deep understanding of OT/IoT technologies, architectures, threats and controls.
• Experience building a security capability from scratch.
• Knowledge of IEC 62443, NIST CSF, and NIST SP 800-82.
• Experience applying the Purdue model in manufacturing/engineering contexts.

Responsibilities

• Build and lead OT/IoT security capability from ground up.
• Define OT/IoT security strategy, roadmap, operating model, and priorities.
• Create and maintain an accurate inventory of OT/IoT assets and dependencies.
• Identify security risks, control gaps and vulnerabilities in OT/IoT environments.
• Lead procurement and integration of OT/IoT security technologies and services.
• Develop OT/IoT security policies, governance processes and monitoring.
• Translate threat intelligence into actionable detection and mitigation requirements.
• Partner with IT, engineering, site leads and stakeholders.
• Define metrics and report on OT/IoT risk, performance and maturity.

Skills

OT/IoT security certifications

IEC 62443 / NIST CSF knowledge

Purdue model experience

Project management

Job description

Harrington Starr is seeking an OT/IoT Security Lead to build and lead the organization's OT/IoT security capability from the ground up. You will define strategy, roadmap, and operating model, owning governance, tooling and incident response for OT/IoT environments.

You will work cross-functionally with Threat Intelligence, Incident Response, Vulnerability Management, GRC and Security Architecture, collaborating with engineering and site teams to embed pragmatic security controls.