OT Risk Assessor IEC62443

VIQU IT; United Kingdom; Remote; GBP 111,000 - 166,000; Full time

Job summary

VIQU IT is seeking an IEC 62443 OT Risk Assessor to audit IT/Engineering OT for clients in Utilities, Transport and Defence sectors, with experience of national critical infrastructure. Security clearance is required.

You will conduct risk assessments, perform impact analysis, define secure zones, review architectures, and produce risk registers and remediation roadmaps for stakeholders. The assignment runs 12 months with remote work and travel to client sites.

Qualifications

• Deep familiarity with IEC 62443/OT risk frameworks.
• Experience with industrial networks, SCADA, and Purdue Model.
• Ability to translate complex risks into clear business impacts for leadership.

Responsibilities

• Conduct risk assessments and identify worst-case unmitigated risks.
• Perform Impact & Consequence Analysis on critical processes.
• Define zones and conduits based on data flows and SL-T targets.
• Identify vulnerabilities and gaps in system architectures and asset inventories.
• Produce risk registers, CRS documents, and remediation roadmaps for stakeholders.

Skills

OT/ICS Experience

Industrial networks

Purdue Model

Business impact translation

Tools

IEC 62443 framework

Job description

My client is looking for a IEC 62443 OT Risk Assessor to audit IT/Engineering operation technology for a variety of clients to IEC62443. You will have experience in this area, along with experience of National critical infrasturcture with in the Utilities / Transport or Defence industry.

Duration: 12 months

Location: Remote - travel to customer sites

Inside IR35 - Security Clearance is required

Core Responsibilities

• Conduct Risk Assessments: Execute initial high-level risk assessments (per IEC (phone number removed)-2) to identify worst-case unmitigated risks and detailed risk assessments where threats exceed tolerable levels.
• Impact & Consequence Analysis: Evaluate the physical, safety, environmental, and financial impacts of a potential cyber disruption on critical industrial processes and plant operations. [
• Zone and Conduit Definition: Collaborate with engineering teams to segment networks into secure zones and conduits based on data flows and target Security Levels (SL-T). [
• Vulnerability & Gap Analysis: Review system architectures, existing countermeasures, network drawings, and asset inventories to locate security gaps.
• Documentation & Remediation: Produce risk registers, security requirements specifications (CRS), and actionable, time-bound remediation roadmaps for stakeholders.

Key Requirements & Qualifications

• Standard Knowledge: Deep familiarity with the framework
• OT/ICS Experience: Understanding of industrial network architectures, SCADA systems, and the Purdue Model.
• Soft Skills: Ability to translate complex technical risks into clear business impacts for non-technical leadership.