OT Security Consultant

Bureau Veritas Cybersecurity; Randstad; Hybrid; EUR 70,000 - 100,000; Full time

Job summary

Bureau Veritas Cybersecurity is seeking an OT Security Consultant to help clients strengthen OT security, assess risks and prepare for IEC 62443, CRA, and NIS2 compliance.

You will work with diverse clients across industries in the Netherlands, delivering risk assessments, threat modelling, training, and advisory services to improve cyber resilience of SCADA/ICS networks.

Qualifications

• Experience with industrial systems such as PLCs, DCS, or SCADA.
• Fluency in Dutch and English.
• Knowledge of IEC 62443, MITRE ATT&CK for ICS, NIST CSF, or NIST SP 800-82.
• Experience sharing knowledge via white papers, talks, or presentations is a plus.

Responsibilities

• Perform advisory services on client SCADA/ICS/OT infrastructure using IEC 62443 methodology, gap assessments, and security maturity reviews.
• Assist in security design and architecture of industrial networks; provide recommendations to improve design.
• Help customers build or extend their SCADA/ICS/OT security programs and roadmaps.
• Apply secure-by-design principles, threat modelling, and risk assessment to OT products.
• Deliver OT cybersecurity training on IEC 62443, CRA, and related standards and regulations.
• Collaborate with engineering and supply chain teams to implement effective security controls.
• Interpret vulnerabilities and risks and translate them into business impact.

Skills

OT security

SCADA/ICS/OT

Risk assessment

Threat modelling

IEC 62443

ATT&CK for ICS

Dutch-English

Modbus

IEC 104

Tools

Modbus

IEC 104

Job description

Imagine your customer is a leading energy provider or critical infrastructure operator, specializing in the delivery of essential services that keep industries and communities running. As an OT security professional, your mission is ambitious: to optimize operational efficiency, ensure compliance with industry-leading certifications, and protect the systems at the heart of your client’s operations.

Do you want to contribute to digital security in the Netherlands and beyond? In this context, we are looking for an OT Security Consultant.

As a consultant, you will work with a wide range of clients across various industries. You will help them strengthen the security of their industrial systems and prepare them for digital growth.

Through practical training sessions, you will introduce clients to IEC 62443, the leading standard for OT security. You will work on gap assessments or risk assessments based on IEC62443, IT/OT site assessments, Threat Modeling, NIS2 compliance checks and Security Maturity Assessments. All these services are designed to support our customers to identify risks and improve their security resilience, no matter their current security maturity state. On top of these services, you will also provide specific OT security training and perform OT security research.

You will act as a trusted partner to your clients. As an expert, you will provide advice, contribute ideas, and help them tackle cybersecurity challenges. Drawing on your knowledge of penetration testing, risk assessment, governance OT architecture and OT security, you will make their systems more resilient. From securing industrial networks to protecting critical processes, your work will have a real impact.

And your success goes beyond simply "meeting compliance requirements." You ensure that your clients' OT environments are secure and future-ready.

What will you do?

• Perform advisory services on our client’s SCADA/ICS/OT infrastructure for small to large-sized projects. This will include security risk assessments based on IEC 62443 methodology, gap assessments, security maturity reviews, trainings and consultancy support;
• Provide support in security design and security architecture of industrial networks and provide recommendations to improve the design;
• Assist customers in establishing or extending their SCADA/ICS/OT security program by building joined roadmaps;
• Apply secure by design principles, threat modelling, and risk assessment to OT products;
• Demonstrate strong knowledge of the IEC 62443 set of standards the Cyber Resilience Act (CRA), NIS2, and industry-specific standards like TISAX, UR E26/E27, EASA Part-IS and so on.
• Deliver OT Cybersecurity training courses on IEC62443, CRA, and other standards and regulations
• Collaborate with engineering and supply chain teams to implement and verify effective security controls.
• Interpret security vulnerabilities, risks, policies, and procedures concerning the operational business impact;
• Manage and execute assessments based on internationally recognized frameworks or specific frameworks developed by Bureau Veritas Cybersecurity and support in certification journey;
• Support our sales with your technical expertise;

What do you bring?

• Experience with industrial systems such as PLCs, DCS, or SCADA.
• Familiarity with industrial protocols such as Modbus or IEC 104.
• Experience conducting risk assessments and threat modelling.
• Excellent communication skills in both Dutch and English. You can effectively engage with stakeholders at all levels, from C-level executives to technical specialists and non-technical contacts.
• Knowledge of standards and frameworks such as IEC 62443, MITRE ATT&CK forICS, NIST CSF, or NIST SP 800-82.
• Experience sharing knowledge, for example through white papers, presentations, or speaking engagements or ambition to do so would be a big plus.
• A proactive personality. You think along with clients and know how to bring people on board with your ideas.

What can you expect at Bureau Veritas Cybersecurity?

At Bureau Veritas Cybersecurity you work in an environment where trust, expertise and social impact are key. We believe that you can really make a difference when you get the space to deepen your knowledge and actively contribute to a safer digital society. What does that look like in practice?

Impactful growth: The cybersecurity division of Bureau Veritas is rapidly growing, and you will have the chance to grow along with it. Whether it's about taking on more responsibilities, increasing your visibility within and outside the organization, or pursuing training and education, your career development is a priority. Growth at Bureau Veritas Cybersecurity occurs also by participating in projects that have a real impact on society. Whether protecting smart devices from hacking attempts or performing an IT audit for the government, you'll build your skills while making a difference. You'll receive support through clear growth paths, regular performance reviews and the opportunity for active learning.

Working with a diverse client portfolio: Our clients come from many industries and contexts, but have one thing in common: they rely on our expertise to meet security and compliance requirements and to build cyber resilience. In your role, you'll help protect people, processes and technology within IT, OT and IoT environments, supporting clients in identifying risks and addressing them with confidence.

Work within a highly skilled community: Cybersecurity does not stop at national borders, and neither does the way we work. With teams around the world, you'll work with colleagues from different countries, disciplines and cultures, connected by a shared commitment to quality and integrity. We share knowledge, learn from each other and develop new solutions together, supported by initiatives such as our R&D programs and hands-on test labs.

A culture of respect, connection and well-being: We actively pursue a safe, inclusive and positive work environment. Our values define how we collaborate, give feedback and assess performance. We support well-being and team bonding through team activities, access to OpenUp and by encouraging a healthy work-life balance with flexible work options.

We believe in celebrating successes and creating a good work environment. We regularly organize fun activities, ranging from annual ski trips to various wine and beer tastings, sailing trips, barbecues, and more. Team building is important for us.

Are you the OT Security Consultant we are looking for?

Note: Pre-employment screening, including a Certificate of Conduct (VOG), and assessment are part of the recruitment process.