Senior Cyber Security and OT Consultant - &100k + bens

Circle Recruitment; England; Remote; GBP 90,000 - 110,000; Full time

Job summary

Circle Recruitment is seeking a Senior Cyber and OT Security Consultant to join a growing consultancy, offering UK remote work and a package around GBP100k plus bens. You will help clients manage information security risks across complex IT and OT environments, delivering practical advice and risk-based improvements.

The role requires broad information security consultancy experience, risk management and familiarity with ISO 27001, NIST CSF and CAF.

Qualifications

• Experience delivering security assessments, risk reviews or advisory engagements, ideally within a consultancy or professional services environment.
• Solid understanding of information security risk assessment, risk treatment, security controls and governance.
• Practical knowledge of ISO 27001, NIST CSF and/or the NCSC Cyber Assessment Framework (CAF).
• Independent delivery: manage your own work with limited supervision and professional judgement.

Responsibilities

• Managing client engagements and building trusted relationships with IT Directors and other senior stakeholders.
• Assessing information security risks, reviewing existing controls and identifying areas for improvement.
• Advising on security strategy, governance, risk management and implementation of good practice.
• Applying recognised frameworks and standards, including ISO 27001, NIST CSF and the NCSC CAF.
• Supporting existing OT security engagements and gradually assuming responsibility for ongoing delivery.
• Adapting quickly between clients, industries and assignments in a consultancy environment.
• Identifying opportunities to add value for clients and helping develop longer-term consulting relationships.

Skills

Cyber security consulting

Risk management

Security frameworks

Independent delivery

Professional judgement

Job description

Senior Cyber and OT Security Consultant - UK remote - GBP100k + bens

An opportunity for an experienced Cyber Security Consultant to join a growing consultancy, supporting clients in managing information security risks across complex IT and Operational Technology (OT) environments.

You do not need to be an OT security specialist but this role would suit someone with a solid background in information security consulting, risk management and recognised security frameworks is essential, while familiarity with industrial environments and OT security standards would be an advantage.

The Role

Working as a Senior Consultant, you will deliver practical cyber security advice, helping clients understand their risks, identify weaknesses and develop proportionate security improvements.

Your responsibilities will include:

• Managing client engagements and building trusted relationships with IT Directors and other senior stakeholders.




• Assessing information security risks, reviewing existing controls and identifying areas for improvement.




• Advising on security strategy, governance, risk management and the implementation of good practice.




• Applying recognised frameworks and standards, including ISO 27001, NIST Cybersecurity Framework (NIST CSF) and the NCSC Cyber Assessment Framework (CAF).




• Supporting existing OT security engagements, learning the client environments and progressively assuming responsibility for their ongoing delivery.




• Adapting quickly between clients, industries and assignments in a consultancy environment.




• Identifying opportunities to add value for clients and supporting the development of longer-term consulting relationships.

What We're Looking For

You will have a strong grounding in information security, with enough breadth to understand the relationships between technology, business risk, governance and operational resilience.

Essential experience and attributes include:

• Cyber security consulting: Experience delivering security assessments, risk reviews or advisory engagements, ideally within a consultancy or professional services environment.




• Risk management: A solid understanding of information security risk assessment, risk treatment, security controls and governance.




• Security frameworks: Practical knowledge of ISO 27001, NIST CSF and/or the NCSC Cyber Assessment Framework. You should be comfortable applying frameworks to real client environments rather than simply discussing them theoretically.




• Independent delivery: The maturity, initiative and adaptability to manage your own work, investigate unfamiliar issues and deliver quality outcomes with limited supervision.




• Professional judgement: An understanding of when to provide advice independently and when to involve technical specialists or seek further expertise.

Professional qualifications such as CISSP or CISM would be advantageous, but practical experience, sound judgement and the ability to apply security principles effectively are more important than collecting certifications.

You do not need decades of experience. We are looking for someone who has developed sufficient consulting capability to operate confidently at Senior Consultant level and take responsibility for client engagements.

The initial focus will be supporting an established portfolio of clients with OT security requirements. Previous exposure to industrial environments, manufacturing, critical infrastructure or industrial control systems would therefore be beneficial.

Knowledge of IEC 62443, industrial control system security, OT risk assessment or the differences between IT and OT security would be particularly useful.

You should be comfortable working alongside technical specialists and using their expertise to inform sound, commercially sensible recommendations.

The Right Person

This opportunity will suit someone who enjoys and has experience in 3rd part consultancy and the variety it brings.

You will be comfortable walking into a client meeting, asking intelligent questions, understanding the problem and working through the detail. You can establish trust without overstating your expertise, communicate confidently with senior stakeholders and remain adaptable when client requirements change.

This role is open to UK eligible workers. Sadly VISA support is not available. You'll need full and permanent right to work in the UK, unsupported by VISA or a separate VISA. This role is expected to have some reasonable and fully expensed travel.