Lead OT Cybersecurity Engineer

CREGG Group; Galway; On-site; Confidential; Full time

Job summary

CREGG Group seeks an OT Cybersecurity Lead to act as the senior technical authority for cybersecurity across manufacturing equipment and production systems in Galway. You will define patching strategies, governance and supplier requirements, and lead threat mitigation across engineering, automation and manufacturing teams.

The role emphasizes hands-on OT security, asset inventories, vulnerability remediation and ensuring compliance with evolving EU regulations such as Cyber Resilience Act and

Qualifications

• Four+ years of hands-on OT cybersecurity work with asset inventory and remediation.
• Experience building or running OT patching for production equipment.
• Can build and maintain OT inventory and identify vendor support status.
• Understands PLC-based and PC-based machine control systems and assesses cybersecurity risk.
• Knows how cybersecurity requirements are written into equipment purchasing and supplier lifecycles.
• Knowledge of Cyber Resilience Act, NIS2 and AI Act impact on procurement and operation.

Responsibilities

• Maintain an accurate OT asset inventory and identify gaps and remediation priorities.
• Decide to patch, delay or compensate for vulnerabilities and document rationale and residual risk.
• Own the OT patching and firmware strategy, including assessment, testing, deployment, exception management and monitoring.
• Define cybersecurity requirements for components, machine builds and supplier-built equipment before purchase.
• Review machine builder, OEM and system integrator designs from a cybersecurity and obsolescence perspective.
• Define compensating controls for legacy and unpatchable systems, including segmentation, access restriction, allowlisting, monitoring and backup.
• Track EU regulation, including the Cyber Resilience Act, NIS2 and the AI Act, identify where it affects our purchasing and equipment, and work with Legal, Regulatory and Quality on the response.
• Provide technical direction to engineering, automation, manufacturing and enterprise cybersecurity teams, and set the standards they work to.

Skills

OT cybersecurity

Asset inventory

Vulnerability assessment

Remediation

Firmware patching

Patch management

PLC/PC control understanding

Supplier lifecycle risk

Industrial networks

Security requirements for equipment

Education

Bachelor's degree in engineering or computer science

IEC 62443 training or certification

GICSP or equivalent certification

Experience in regulated manufacturing (pharma, medical)

Tools

OT asset discovery tools

Monitoring tools

Job description

OT Cybersecurity Lead
Location: [Galway]
Employment type: [Contracting with potential in 12 months for conversion to staff]
Purpose: The OT Cybersecurity Lead is the senior technical authority for cybersecurity across our manufacturing equipment and production systems. The role covers how we buy, build and operate machines, from supplier requirements through to patching, legacy management and incident response. The post holder sets practical requirements that engineering, automation, manufacturing and procurement can apply, and makes defensible risk decisions where there is no perfect option.

Key Responsibilities

• Maintain an accurate OT asset inventory and use it to identify OS and firmware gaps, unsupported systems and remediation priorities.
• Decide, for each vulnerability or patch, whether to patch, delay or compensate, and document the rationale and residual risk.
• Own the OT patching and firmware strategy, including assessment, testing, deployment, exception management and monitoring.
• Define cybersecurity requirements for components, machine builds and supplier-built equipment before purchase, including support duration, end of support, patching, remote access and logging.
• Review machine builder, OEM and system integrator designs and components from a cybersecurity and obsolescence perspective.
• Define compensating controls for legacy and unpatchable systems, including segmentation, access restriction, allowlisting, monitoring and backup.
• Track EU regulation, including the Cyber Resilience Act, NIS2 and the AI Act, identify where it affects our purchasing and equipment, and work with Legal, Regulatory and Quality on the response.
• Provide technical direction to engineering, automation, manufacturing and enterprise cybersecurity teams, and set the standards they work to.

Essential Experience and Skills

• At least four years of hands-on OT cybersecurity work, including asset inventory, vulnerability assessment and remediation. Enterprise security or policy work alone does not meet this requirement.
• Has built or run OS and firmware patching for production equipment, and can explain how this differs from enterprise IT patching.
• Can build and maintain an OT inventory and identify gaps against vendor support status for OS, firmware and software.
• Understands how PLC-based and PC-based machine control systems are designed, updated and validated, sufficient to assess their cybersecurity risk and speak credibly to automation engineers. Programming expertise on specific platforms is not required.
• Understands how cybersecurity requirements are written into component and machine purchasing, and how supplier lifecycle commitments affect long-term risk.
• Can explain the practical impact of the Cyber Resilience Act, NIS2 and the AI Act on equipment procurement and operation in plain terms.

Qualifications

• Bachelor's degree in Automation Engineering, Control Engineering, Electrical or Electronic Engineering, Computer Engineering, Computer Science, Cybersecurity or a related technical discipline, or equivalent substantial industry experience.
• IEC 62443 training or certification.
• GICSP or equivalent industrial cybersecurity certification.
• Experience in medical device, pharmaceutical or other regulated manufacturing, including working with validation and change control.
• Experience working with machine builders and OEMs on cybersecurity requirements for new equipment.
• Experience of multi-site OT programmes and standardising controls across different equipment estates.
• Working knowledge of industrial networking, segmentation and secure remote access.

Experience with OT asset discovery and monitoring tools.