OT Security Risk & Compliance Lead

Morson Talent; United Kingdom; Hybrid; GBP 100,000 - 125,000; Full time

Job summary

A leading global renewables business is seeking an OT Security Risk & Compliance Lead to drive and manage security risk management activities in OT/ICS environments. The ideal candidate should possess strong technical knowledge, stakeholder management skills, and experience in compliance frameworks. This role offers a permanent position with a competitive salary, bonus, and pension, along with a hybrid working model including one day a week on-site.

Benefits

Flexible hybrid model

Competitive package including bonus and pension

Qualifications

• Experience working with OT Systems or applying engineering principles in production environments.
• Strong technical understanding across OT/ICS environments.

Responsibilities

• Define and deliver security risk assessments and maintain accurate risk registers.
• Lead risk review meetings with stakeholders and represent Security at leadership forums.
• Oversee compliance activities and manage non-compliance.

Skills

Stakeholder management

Technical understanding of OT/ICS environments

Knowledge of control frameworks (NIST, IEC 62443, ISO27001)

Job description

OT Security Risk & Compliance Lead

Permanent Salary + £15% bonus + 10% pension Hybrid 1 day a week on site in your desired office location, Glasgow, London, Leeds or Ipswich

Are you passionate about driving security standards in OT/ICS environments? This is an exciting opportunity to join a leading global renewables business as they strengthen their Cyber and Information Security capability.

Reporting to the Head of InfoSec Governance, Risk & Compliance (via the OT Security Risk & Compliance Manager), the OT Security Risk & Compliance Lead will play a pivotal role in shaping, managing and influencing security risk management activities across the Group, with a particular focus on OT/ICS.

Key Responsibilities:

• Define and deliver security risk assessments and maintain accurate risk registers and reports.
• Lead security risk review meetings with stakeholders and represent Security at senior leadership forums.
• Support the development, rollout and adoption of the Group Security Framework, Policies and Standards, ensuring alignment to external regulations (NIS Regulation 2018, SEC, PCI-DSS, etc.).
• Oversee compliance activities, promote a risk-aware culture, and manage non-compliance or exceptions.
• Provide security SME input into projects, supporting delivery teams and asset owners in understanding their responsibilities.
• Assist with supply chain security assessments and contribute to enterprise-wide risk and audit reporting.

What We re Looking For:

• Previous experience working with OT Systems or applying engineering principles in production environments.
• Knowledge of control frameworks such as NIST, IEC 62443, ISO27001, ITIL, SABSA.
• Strong technical understanding across OT/ICS environments.
• Excellent stakeholder management skills with the ability to influence and communicate effectively at all levels.

Why Join?

• Be part of a forward-thinking organisation investing heavily in innovation, renewables, AI and IoT.
• Play a key role in enhancing their global cyber resilience.
• Enjoy a flexible hybrid model with 95% remote working.
• Competitive package including bonus and pension.