Senior OT Security Consultant

Infosec; North East; Remote; GBP 90,000 - 120,000; Full time

Job summary

Infosec seeks a Senior OT Security Consultant to lead consulting across critical infrastructure. You will assess OT environments, run gap analyses, and guide customers toward compliance with IEC 62443, NIS2 and ISO standards.

In this fully remote role with national travel, you will mentor engineers, shape governance policies, and drive security maturity in industrial settings, delivering actionable roadmaps and risk-reduction strategies.

Qualifications

• Demonstrable OT Cyber Security experience in critical infrastructure.
• Strong knowledge of OT/ICS environments and relevant standards.
• Ability to identify risks and craft practical remediation plans.
• Experience engaging with senior stakeholders and producing clear reports.

Responsibilities

• Lead OT cyber security consulting engagements across critical infrastructure sectors.
• Deliver OT security assessments for ICs, SCADA, DCS and industrial environments.
• Provide governance, policies, standards, and procedures support.
• Mentor junior consultants and contribute to method and service development.
• Support business development with bids, workshops and pre-sales activities.

Skills

OT/ICS knowledge

Stakeholder engagement

Report writing

Workshop facilitation

Security frameworks familiarity

Education

CISSP

GICSP

CISM

NCSC Chartered status

Tools

IEC 62443

NCSC CAF

NIS/NIS2

ISO 27001

NIST SP 800-82

Job description

Our client, a specialist OT Cyber Security consultancy supporting some of the UK's most critical national infrastructure organisations, is seeking a Senior OT Security Consultant to join their team. This permanent role provides the opportunity to work fully remotely and requires UK-wide travel for client engagements.

The role is fully remote buyt expect to travel to client sites.

Key Responsibilities: OT Cyber Security Consulting

• Lead OT cyber security consulting engagements across critical national infrastructure sectors.
• Deliver OT security assessments across ICs, SCADA, DCS, and wider industrial control environments.
• Conduct IEC 62443 gap assessments and support customers in achieving compliance and maturity objectives.
• Perform cyber security maturity assessments using recognised frameworks such as NCSC CAF, IEC 62443, NIST SP 800-82, and ISO 27001.
• Advise clients on NIS and NIS2 compliance requirements and support readiness programmes.
• Produce remediation roadmaps, improvement plans, and strategic recommendations.
• Deliver cyber risk assessments focused on operational technology environments.
• Facilitate stakeholder workshops to identify risks, priorities, and security improvement opportunities.

Technical Leadership & Assurance

• Provide consultancy oversight across OT cyber transformation programmes.
• Review and assure engineering designs, architectures, and technical solutions.
• Collaborate with engineering teams to ensure consulting recommendations can be effectively delivered.
• Support clients in the development of OT cyber security governance, policies, standards, and procedures.
• Ensure solutions align with operational requirements, safety considerations, and regulatory expectations.
• Mentor and support junior consultants and engineers across the business.
• Contribute to the ongoing development of consulting methodologies, frameworks, and service offerings.

Business Development & Client Engagement

• Support the preparation of bids, proposals, and statements of work.
• Participate in customer meetings, workshops, and pre-sales activities.
• Provide technical subject matter expertise during business development engagements.
• Build strong relationships with customer stakeholders across engineering, operations, cyber security, and executive leadership functions.
• Identify opportunities to expand consulting engagements and support long-term customer success.

Job Requirements: Required Experience

• Experience delivering OT Cyber Security consultancy engagements within industrial or critical infrastructure environments.
• Strong understanding of OT/ICS environments, including technologies such as SCADA, PLCs, DCS, and industrial networks.
• Experience conducting security assessments, gap assessments, or cyber maturity reviews.
• Knowledge of industry frameworks such as IEC 62443, NCSC CAF, NIS/NIS2, or equivalent OT security standards.
• Ability to identify cyber security risks and develop practical remediation recommendations.
• Experience engaging with technical, operational, and senior business stakeholders.
• Strong report writing, presentation, and workshop facilitation skills.

Technical Knowledge

Good understanding of:

• Operational Technology (OT) and Industrial Control Systems (ICS)
• SCADA and industrial automation environments
• OT cyber security risks and threat landscape
• Network segmentation and security architecture principles
• IEC 62443 and OT security best practices
• Critical National Infrastructure security requirements
• The differences between IT and OT security environments

Qualifications & Certifications

Essential

• Demonstrable OT Cyber Security experience

Desirable

• IEC 62443 qualifications
• CISSP
• GICSP
• CISM
• NCSC Chartered status

Security Clearance

Essential

• Must hold UK Security Clearance (SC) or be eligible and willing to undergo SC clearance.
• To be eligible for SC clearance, candidates must typically have resided in the UK for the required vetting period and meet UK Government security vetting requirements.

What Success Looks Like:

• Delivering high-quality OT cyber security assessments and consultancy engagements.
• Building trusted relationships with customers across CNI sectors.
• Producing clear, actionable recommendations that improve customer security posture.
• Supporting the growth of the consultancy practice through technical leadership and customer engagement.
• Mentoring engineers and helping develop future consulting capability within the company.