Senior OT Security Consultant

nxzen; Metropolitan Borough of Solihull; Vor Ort; GBP 85.000 - 120.000; Vollzeit

Zusammenfassung

nxzen seeks a highly experienced Senior OT Security Consultant to lead and deliver complex security engagements across UK Energy & Utilities clients. You will shape security strategy, guide technical delivery, and mentor consultants across IT/OT domains.

The role demands deep OT/ICS expertise, regulatory awareness, and the ability to engage executives while delivering practical, risk-based security programs. This position is based in the UK and offers leadership opportunities.

Qualifikationen

• Extensive experience with OT, IC, SCADA and industrial networking.
• Proven track record leading OT security engagements in Energy & Utilities.
• Expert understanding of IC protocols (Modbus, DNP3, IEC-104, OPC/UA).
• Experience applying IEC62443, NIST CSF, NIST 800-82, NCSC CAF.
• Ability to translate OT risks into business recommendations.

Aufgaben

• Lead OT and IC security strategy development, maturity assessments, and architectural reviews.
• Advise senior client stakeholders on governance, risk, resilience, and regulatory obligations.
• Define OT security improvement roadmaps and investment cases.

Kenntnisse

OT security

IC/SCADA networks

Regulatory compliance

Stakeholder influence

Mentoring

Jobbeschreibung

We are seeking a highly experienced Senior OT Security Consultant to lead and deliver complex security engagements across UK Energy & Utilities clients. This senior role will be responsible for shaping security strategy, leading technical delivery, influencing senior stakeholders, and mentoring consultants across IT/OT security domains.

The ideal candidate brings deep OT/ICS expertise, an understanding of energy and utility sector regulations, strong consulting capability, and the ability to operate confidently at both technical and executive levels.

Key responsibilities

ABOUT THE ROLE

OT Security Advisory Leadership

• Lead OT and IC security strategy development, maturity assessments, and architectural reviews.
• Advise senior client stakeholders on governance, risk, resilience, and regulatory obligations.
• Define OT security improvement roadmaps and investment cases.

Technical OT / ICSD Delivery Leadership

• Lead design and validation of secure OT architectures including segmentation, firewalls, DMZs, and remote access.
• Oversee OT vulnerability assessments, configuration reviews, and secure integration of IC solutions.
• Provide senior guidance during OT cyber incidents including containment, forensics, and recovery.

Regulatory & Compliance Expertise

• Interpret and apply NIS/NISR, Ofgem/Ofwat expectations, NCSC CAF and IEC62443 requirements.
• Support audit readiness, evidence collation, and remediation planning.

Client Engagement & Delivery Excellence

• Own client relationships and act as senior point of escalation.
• Produce and review high-quality deliverables including designs, assessments and reports.
• Lead proposals, pre‑sales activities and contribute to business development.
• Mentor and coach junior consultants.

What we’re looking for

• Extensive experience with OT, IC, SCADA, DCS and industrial networking.
• Proven track record delivering and leading OT security engagements in Energy & Utilities.
• Expert understanding of IC protocols (Modbus, DNP3, IEC‑104, OPC/UA etc.).
• Significant experience designing and reviewing OT architectures using the Purdue Model.
• Strong familiarity with major OT/IC vendors (Siemens, ABB, GE, Schneider Electric).
• Experience applying frameworks such as IEC62443, NIST CSF, NIST 800‑82, NCSC CAF.

Certifications – Highly Desirable

• OT/IC Security/Safety Certifications
• ISA/IEC 62443 Cybersecurity Expert
• GIAC: GRID, GICSP, GCIP
• TÜV Certified Cyber Security or Functional Safety (preferred)

Engineering Certifications

• CCNA/CCNP or equivalent networking certification (optional)

Personal Attributes

• Strategic thinker with ability to influence senior stakeholders.
• Strong analytical and problem-solving capability.
• Excellent communication and documentation skills.
• Ability to work flexibly across industrial client environments.

Nice to have

• Technical Leadership Skills
• Experience with OT IDS technologies (e.g. Claroty, Nozomi, Dragos).
• Knowledge of secure IC engineering lifecycle and OT asset management.
• Experience leading OT penetration testing or red‑team style engagements.
• Understanding of IoT/IIoT integrations and cloud‑connected OT systems.
• Ability to translate complex OT risks into business‑aligned recommendations.
• Strong workshop facilitation and presentation capability.
• Ability to lead multidisciplinary teams and manage complex client programmes.