OT Risk Assessor IEC62443

VIQU Limited; United Kingdom; Remote; GBP 60,000 - 90,000; Full time

Job summary

VIQU Limited is seeking an IEC 62443 OT Risk Assessor to audit IT/Engineering OT across multiple clients, focusing on national critical infrastructure within Utilities/Transport/Defence sectors. The role involves remote work with travel to customer sites and requires security clearance.

The contractor will conduct risk assessments, analyze impacts, define zones, identify gaps, and deliver remediation roadmaps to stakeholders within a 12-month engagement, with Inside IR35 conditions.

Qualifications

• Deep familiarity with the IEC 62443 framework.
• OT/ICS understanding of industrial network architectures.
• Ability to translate complex technical risks into business impacts for leadership.

Responsibilities

• Conduct risk assessments per IEC 62443 to identify worst-case unmitigated risks.
• Evaluate physical, safety, environmental, and financial impacts of cyber disruption on critical processes.
• Collaborate with engineering teams to define secure zones and conduits per data flows.
• Review architectures and inventories to locate security gaps.
• Produce risk registers and remediation roadmaps for stakeholders.

Skills

IEC 62443

OT/ICS risk

Leadership comms

Job description

My client is looking for a IEC 62443 OT Risk Assessor to audit IT/Engineering operation technology for a variety of clients to IEC62443. You will have experience in this area, along with experience of National critical infrasturcture with in the Utilities / Transport or Defence industry.

Duration: 12 months

Location: Remote - travel to customer sites

Inside IR35 - Security Clearance is required

Core Responsibilities

• Conduct Risk Assessments: Execute initial high-level risk assessments (per IEC #removed#) to identify worst-case unmitigated risks and detailed risk assessments where threats exceed tolerable levels.
• Impact & Consequence Analysis: Evaluate the physical, safety, environmental, and financial impacts of a potential cyber disruption on critical industrial processes and plant operations. [
• Zone and Conduit Definition: Collaborate with engineering teams to segment networks into secure zones and conduits based on data flows and target Security Levels (SL-T). [
• Vulnerability & Gap Analysis: Review system architectures, existing countermeasures, network drawings, and asset inventories to locate security gaps.
• Documentation & Remediation: Produce risk registers, security requirements specifications (CRS), and actionable, time-bound remediation roadmaps for stakeholders.

Key Requirements & Qualifications

• Standard Knowledge: Deep familiarity with the IEC 62443 framework
• OT/ICS Experience: Understanding of industrial network architectures, SCADA systems, and the Purdue Model.
• Soft Skills: Ability to translate complex technical risks into clear business impacts for non-technical leadership.