Lead Consultant (OT Security)

Ncs3; Singapore; Vor Ort; SGD 180.000 - 250.000; Vollzeit

Zusammenfassung

NCS is seeking a self-motivated security consultant with at least 10 years in OT/ICS cybersecurity to provide professional services and advisory to clients in Singapore. You will lead engagements, conduct assessments, and develop threat models and playbooks for IC/OT environments.

You will also drive business development, presales, and client relationships, coordinating with delivery teams to ensure quality, timelines, and revenue targets. Prior government/CII exposure is a plus.

Qualifikationen

• Minimum 10 years in information security with substantial OT/ICS security, governance, risk management, and audit experience.
• Track record in business development, presales, or practice growth including shaping opportunities, developing proposals, and building client relationships that convert to revenue.
• Experience in Singapore-based Government and/or Critical Information Infrastructure (CII) projects is advantageous.
• Knowledge of IEC62443, NIST CSF, Cybersecurity Code of Practice, MITRE ICs ATT&CK.
• Industry certifications such as CISSP, CRISC, CISM, CISA, GICSP or GRID are preferred.

Aufgaben

• Lead and develop a team of consultants to deliver high-quality OT/ICS security engagements.
• Act as engagement lead and escalation point on complex projects, ensuring quality, timeline, and margin targets.
• Manage multiple projects and delivery teams, balancing resources and client priorities.
• Conduct security assessments and audits to identify threats, vulnerabilities, and control gaps in IC/OT environments.
• Develop security policies, incident response plans, and playbooks.
• Perform cyber threat modelling and develop threat profiles based on relevant TTPs.
• Design scenarios for Table-Top Exercises and facilitate delivery for IC/OT clients.
• Review security architecture and advise on remediation roadmaps.
• Develop methodologies, frameworks, workpapers, templates, and tools to improve delivery quality.
• Prepare high-quality reports and keep clients informed.
• Stay updated with trends, regulations, and technologies affecting OT/ICS.

Kenntnisse

Leadership

Client management

OT/ICS security

Presales

Threat modelling

Security assessments

Project management

C-suite communication

Ausbildung

Bachelor's degree in Cybersecurity or related field

Jobbeschreibung

We are seeking self-motivated and driven security consultants to join our team. The ideal candidate will have at least 10 years of experience in OT/ICS cybersecurity and will provide professional services and advisory to our clients. This role involves assessing security measures, identifying vulnerabilities, and recommending solutions to enhance our clients' security posture focused on ICs/OT security

Duties & Responsibilities

• Lead and develop a team of consultants to deliver high-quality OT/ICS security engagements, providing coaching, quality assurance, and technical direction.
• Serve as engagement lead and primary escalation point on complex or high-value projects, ensuring deliverables meet quality, timeline, and margin expectations.
• Manage multiple concurrent projects and delivery teams, balancing resourcing, utilisation, and client priorities.
• Conduct and oversee security assessments and audits to identify threats, vulnerabilities, risks, and control gaps in IC/OT environments.
• Develop security policies, procedures, and standards, as well as incident response plans, procedures, and playbooks.
• Perform cyber threat modelling and develop cyber threat profiles based on relevant threat actor Tactics, Techniques & Procedures (TTPs).
• Design scenarios for cybersecurity Table-Top Exercises (TTX) and facilitate delivery for IC/OT clients.
• Perform security architecture reviews on IC/OT systems to identify control gaps and advise on remediation roadmaps.
• Develop and optimise methodologies, frameworks, workpapers, report templates, and tools to improve consistency, quality, and efficiency of service delivery.
• Prepare and review high-quality reports and documentation for clients.
• Stay updated with the latest cybersecurity trends, threats, regulatory developments, and technologies affecting OT/ICS environments.

Business Development

• Own and grow a portfolio of client relationships, acting as a trusted advisor to clients.
• Identify, qualify, and pursue new business opportunities; build and maintain a healthy sales pipeline for IC/OT security and adjacent GRC services, with accountability for pipeline and revenue targets.
• Lead presales activities end-to-end, including opportunity shaping, solutioning, proposal and bid development, effort estimation, pricing input, and client presentations.
• Drive account expansion by identifying cross-sell and up-sell opportunities within existing engagements and coordinating with account and sales teams.
• Develop go-to-market collateral, service offerings, and thought leadership (e.g. white papers, briefings, conference presentations) to strengthen the practice's market presence.
• Represent the firm at industry events, forums, and client briefings to build brand visibility and generate leads.
• Cultivate partnerships with technology vendors, regulators, and industry bodies relevant to the OT/CII ecosystem.
• Track market developments, competitor activity, and regulatory changes to inform service strategy and identify emerging demand

Degree or higher in Cybersecurity, Computer Science, Engineering, or Information Systems.

Minimum of 10 years in information security, with substantial experience in OT/ICS security, governance, risk management, and audit; experience in other areas of information security will be considered.

Demonstrated track record in business development, presales, or practice growth - including shaping opportunities, developing winning proposals, and building client relationships that convert to revenue.

Experience in Singapore-based Government and/or Critical Information Infrastructure (CII) projects will be an added advantage.

Knowledge of cybersecurity frameworks, industry standards, and regulatory requirements is a must, including:

• IEC62443
• NIST Cyber Security Framework;
• Cybersecurity Code of Practice;
• MITRE ICs ATT&CK Framework

At least one relevant industry certification such as CISSP, CRISC, CISM, CISA, GICSP or GRID.

Customer Proven experience leading teams and managing senior client stakeholders.

Excellent oral and written communication, with strong executive presence and the ability to present credibly to C-suite audiences.

We are driven by our AEIOU beliefs-Adventure, Excellence, Integrity, Ownership, and Unity-and we seek individuals who embody these values in both their professional and personal lives.

Together, we make the extraordinary happen.

Learn more about us at ncs.co and visit our LinkedIn career site.