OT Security Engineer - Critical Infrastructure (Hybrid)

CCL Global; England; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

CCL Global are recruiting an OT Cyber Security Analyst to strengthen OT security posture in critical infrastructure. The role involves hands-on engineering, monitoring, and governance across complex industrial systems.

Type: Contract (Inside IR35), Location: Oxfordshire (Hybrid), Contract length: 6 months. You will implement OT security controls, assess risks, and align with IEC 62443, NIST CSF, CAF, and ISO 27001.

Qualifications

• Experience in OT, industrial control systems, or critical infrastructure environments.
• Hands-on OT security controls implementation and strategy experience.
• Familiarity with IEC 62443, NIST CSF, CAF, ISO 27001 is preferred.
• Ability to work with engineering, operations, and third-party providers.

Responsibilities

• Implement and maintain OT security controls across industrial environments.
• Support OT security strategies, policies, and standards.
• Conduct OT security risk assessments and remediation planning.
• Ensure compliance with IEC 62443, NIST CSF, CAF, ISO 27001.
• Collaborate with engineering/operations to embed security in OT systems.
• Coordinate with MSPs to deliver security services effectively.
• Assist integration of OT with SIEM/SOC tools for monitoring and response.
• Contribute to network segmentation and secure OT architecture.
• Produce policies, standards, and technical guidance documentation.
• Provide technical recommendations to improve OT security maturity.

Skills

OT security

Industrial protocols

SIEM/SOC integration

Risk assessments

Documentation

Stakeholder collaboration

Job description

CCL Global are recruiting an OT Cyber Security Analyst to strengthen OT security posture in critical infrastructure. The role involves hands-on engineering, monitoring, and governance across complex industrial systems.

Type: Contract (Inside IR35), Location: Oxfordshire (Hybrid), Contract length: 6 months. You will implement OT security controls, assess risks, and align with IEC 62443, NIST CSF, CAF, and ISO 27001.