Senior Information Security Consultant (OT)

Waterstons Limited; Glasgow; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Unlimited holidays

Private healthcare

Flexible holiday allowance (min 30)

Job summary

Waterstons Limited is seeking a Senior Information Security Consultant with deep OT cyber security expertise. The role focuses on security across OT environments, with travel to client sites around Glasgow and surrounding areas as required.

You will mentor peers, deliver assessments, and contribute to growing Waterstons' OT security capability. Ideal candidates bring 5+ years in OT security consultancy, strong governance and risk background, and hands-on experience with IEC 62443, NIST CSF,

Qualifications

• Five+ years delivering OT cyber security consultancy, with energy-sector experience.
• Extensive experience defining, reviewing and assuring OT security architectures across complex environments.
• Experience in security governance, risk and assurance, including risk methodologies, leading comprehensive risk assessments and audits.
• Practical experience applying recognised frameworks and standards: IEC 62443, NIST CSF, NIST SP 800-82, ISO/IEC 27001 and the NCSC Cyber Assessment Framework.
• Experience planning, managing and delivering consultancy engagements, with stakeholder management and budgeting.
• Enjoys a varied environment, sharing knowledge to help colleagues.

Responsibilities

• Deliver OT cyber security consultancy engagements across a range of clients and sectors.
• Perform OT security assessments, gap analysis and risk assessments against recognised frameworks and standards.
• Develop pragmatic recommendations that improve cyber resilience while supporting operational requirements.
• Produce high-quality reports, presentations and client-facing deliverables.
• Build trusted relationships with client stakeholders across both operational and technology teams.
• Support proposal development, bids and client growth opportunities.
• Mentor junior consultants and contribute to knowledge sharing across the cyber team.
• Work with Principal Consultants and senior leadership to develop Waterstons' OT security capability.

Job description

Who you’ll be joining

We’re problem solvers at heart. Sometimes the answer is technology, sometimes it is strategy, and sometimes it is a strong cup of tea and a bit of thoughtful conversation. Whatever it takes, we work it out with our clients.

We’re an IT consultancy that helps organisations get the best out of their technology. That means keeping them secure and keeping the bad guys out, making sure everything works and is easy to use, and doing smart things with data and software to give their business an edge. It is important work, and we care about doing it well and for the right reasons.

Life at Waterstons is friendly, flexible and built on trust. We hire people who are curious, thoughtful and good at getting to the heart of a problem. You get support, trust and room to grow in a place that still feels human. The unlimited holidays and private healthcare are a nice touch, although most people stay because it feels like the right place to do good work with good people.

What You’ll Be Doing

As a Senior Information Security Consultant, you'll have an advanced understanding of, and over 5 years experience working with, organisations that have OT networks and standards used in the energy sector, such as the Cyber Assessment Framework and IEC ISA 99/62443.

You’ll be helping multiple clients with different aspects of their security. The role is interesting and varied and a great opportunity for those that prefer spontaneity over routine.

The successful candidate will ideally be based within the Glasgow region or be willing and able to travel to client sites in and around Glasgow for a minimum of two to three days per week, as required by the client.

Your Day-to-Day

• Deliver OT cyber security consultancy engagements across a range of clients and sectors.
• Perform OT security assessments, gap analysis and risk assessments against recognised frameworks and standards.
• Develop pragmatic recommendations that improve cyber resilience while supporting operational requirements.
• Produce high-quality reports, presentations and client-facing deliverables.
• Build trusted relationships with client stakeholders across both operational and technology teams.
• Support proposal development, bids and client growth opportunities.
• Mentor junior consultants and contribute to knowledge sharing across the cyber team.
• Work closely with Principal Consultants and senior leadership to develop Waterstons' OT security capability.

What we're looking for

If some (or most) of the following sound like you, we'd love to hear from you:

• A minimum of five years’ experience delivering OT cyber security consultancy, including at least two years’ experience within the energy sector or directly supporting energy-sector organisations.
• Extensive experience defining, reviewing and assuring OT security architectures across complex operational environments.
• Experience in security governance, risk and assurance, including experience implementing and enhancing security risk methodologies, leading comprehensive risk assessments and delivering security audit and assurance programmes.
• Practical experience applying recognised cyber security frameworks and standards, including IEC 62443, NIST Cybersecurity Framework, NIST SP 800-82, ISO/IEC 27001 and the NCSC Cyber Assessment Framework.
• Experience planning, managing and delivering consultancy engagements, including managing client expectations, budgets and project milestones.
• Someone who enjoys a varied environment, sharing their knowledge and experience to support colleagues.

Nice to have

• CISM or CISA
• IEC ISA 62443 expert cyber security certificate.
• Experience with the Cyber Assessment Framework, NIST CSF, NIST SP 800-82, IEC ISA 99/62443 and CIS Controls.
• Strong understanding of IT and OT security risks.
• Knowledge of the threat landscape.
• Security Check (SC) clearance
• Someone who is comfortable engaging with operational teams, engineers, security teams and senior stakeholders to communicate cyber security risks and recommendations effectively.

How We Take Care of You

As well as offering a competitive salary, we have an attractive benefits package including:

• A healthy work life balance with flexible and agile working being the norm
• Flexible holiday allowance, with a minimum of 30 days a year
• EV car scheme (salary sacrifice)
• Room to grow with supported development opportunities and sponsored training
• Enhanced family policies
• If you ever need it, company sick pay and life assurance
• Supported wellbeing with regular initiatives, an employee assistance programme and private medical insurance
• Flexible benefits such as a dental scheme, eye care support, season ticket loan and cycle to work

Due to the nature of our work and the industries we support, all colleagues are required to successfully complete appropriate background security screening. Some client engagements may require Security Check (SC) clearance, and colleagues must therefore be willing and eligible to undergo SC clearance where required.

Waterstons is committed to creating and an inclusive, understanding, and flexible place to work. We value diversity, equality and inclusion and encourage everyone to 'bring their whole selves' to work. We believe that a company that works to truly embrace and value diversity, create an environment where everyone from any background can do their best work, and feel valued and appreciated is a better company to work for.

Privacy Statement

Waterstons are gathering the data in this application for the purpose of recruitment and to ensure we can contact you regarding this application. For information about what we do with your personal data see our Privacy Notice.