OT SME

Vallum Associates; Greater London; Hybrid; GBP 166,000 - 221,000; Full time

Job summary

Vallum Associates seeks an OT SME for a London-based contract role. You will apply IEC 62443, design and operate OT security controls across large estates and critical facilities, and guide governance improvements in collaboration with facilities teams.

The role requires 10+ years in OT, 5+ years in BMS/HVAC/industrial systems, and strong vendor and regulatory awareness including NIS2 and DORA. Hybrid onsite work with 2 days onsite per week is offered.

Qualifications

• 10+ years' experience with Operational Technology in large estates.
• 5+ years designing, operating or securing OT systems (BMS, HVAC, electrical power, fire, lifts).
• Experience applying IEC62443 and regulatory frameworks in real OT environments.

Skills

IEC 62443

OT security governance

NIS2 & DORA awareness

Building automation platforms

Vendor management (OT)

Tools

Siemens

Schneider Electric

Honeywell

Johnson Controls

Job description

Role: OT SME

Location: London

Type of role: Contract

Mode of work: 2days Onsite in a week

JD:

To be successful in this role, you should meet the following requirements:

• 10+ years' experience working with Operational Technology in large, complex estates, preferably across corporate buildings, critical facilities or datacentres
• 5+ years' experience designing, operating or security building OT systems such as BMS, HVAC. Electrical power systems, fire systems, lifts and SMART building platforms
• Demonstratable experience uplifting immature or legacy OT environments, moving from minimal technical controls to defined security, architecture and governance standards
• Strong practical experience applying IEC62443 in real-world OT and building technology environments with the ability to tailor controls to differing site risk profiles and operational constraints
• Familiarity with building automation and OT vendors such as Siemens, Schneider Electric, Honeywell, Johnsons Controls or equivalent
• Understanding of relevant regulatory and resilience frameworks (e.g. NIS2, DORA) and their impact on OT design and operations.
• Familiarity with standards such as ISO 27001, NIST CSF, IEC 62443

DESIREABLE SKILLS:

• Desirable certifications: CISSP, CISM, GICSP (Global Industrial Cybersecurity Professional) or ISA/IEC 62443
• Experience supporting development of an OT Target Operating Model.
• Familiarity with OT asset discovery and vulnerability scanning approaches i
• Experience supporting third-party/vendor management within an OT environment.
• Experience contributing to an OT risk management framework and/or maturity uplift planning