OT Security Engineer

Maxwell Bond; Colorado; On-site; USD 162,000 - 198,000; Full time

Job summary

Maxwell Bond is seeking an experienced NERC CIP Cybersecurity Specialist to support a major power generation client in the United States. The role centers on developing regulatory-compliant cybersecurity programmes, conducting on-site assessments, and ensuring security controls are effectively implemented across critical infrastructure environments.

You will collaborate with customer cybersecurity, engineering, IT and operations teams, identify gaps, and produce remediation plans and supporting

Qualifications

• Proven experience with NERC CIP standards and compliance.
• Experience in Medium and/or High impact environments.
• Experience developing cybersecurity programmes and conducting assessments.
• Background in power generation or energy sector.
• Experience with on-site assessments and customer engagement.
• Knowledge of OT/ICS including SCADA.

Responsibilities

• Develop and support cybersecurity programmes in power/critical infrastructure.
• Conduct on-site cybersecurity assessments and evaluate controls.
• Assess environments against NERC CIP standards (Medium/High).
• Identify compliance gaps and remediation needs.
• Develop recommendations and remediation plans.
• Collaborate with customer cybersecurity, engineering, IT and operations teams.
• Review security policies, procedures and evidence.
• Communicate findings to technical stakeholders and leadership.

Skills

NERC CIP

OT/ICS

Stakeholder mgmt

On-site assessments

Documentation

Tools

NIST frameworks

Job description

We’re working with a client on an urgent requirement for an experienced NERC CIP Cybersecurity Specialist to support a major power generation organisation in the United States.

Our client operates within the cybersecurity and critical infrastructure space, supporting organisations with specialist security expertise and the delivery of complex cybersecurity projects.

They are looking for an experienced professional with a strong background in NERC Critical Infrastructure Protection (CIP) to support a significant customer engagement within the energy sector. The work will involve cybersecurity programme development, on-site assessments and helping ensure security requirements are implemented effectively across critical infrastructure environments.

This is an opportunity to join a specialist project where relevant regulatory knowledge and practical delivery experience will be key.

Key Responsibilities

• Develop and support cybersecurity programmes within power generation and critical infrastructure environments.
• Conduct on-site cybersecurity assessments and evaluate existing security controls.
• Assess environments against applicable NERC CIP standards, including Medium and High impact classifications.
• Identify compliance gaps, cybersecurity risks and areas requiring remediation.
• Develop practical recommendations, remediation plans and supporting documentation.
• Work directly with customer cybersecurity, engineering, IT and operational teams.
• Review security policies, procedures, technical controls and compliance evidence.
• Communicate assessment findings and recommendations to technical stakeholders and customer leadership.

Key Requirements

• Proven experience working with NERC CIP cybersecurity standards and compliance requirements.
• Practical experience with NERC CIP Medium and/or High impact environments.
• Experience developing cybersecurity programmes and conducting assessments.
• Background in power generation, electric utilities or the wider energy sector.
• Experience working directly with customers and conducting on-site assessments.
• Ability to identify compliance gaps and recommend actionable remediation measures.
• Strong technical documentation and stakeholder management skills.
• Willingness to travel to customer sites as required.
• Experience supporting NERC CIP audits, compliance programmes and remediation projects.
• Knowledge of OT/ICS environments, including SCADA and industrial control systems.
• Experience working with Generator Owners, Generator Operators or other electricity-sector entities.
• Familiarity with NIST frameworks and ISA/IEC 62443.

Salary & Package

• Basic salary up to $180,000, depending on experience.
• Location within the US Mountain region.
• Opportunity to work on a significant cybersecurity engagement supporting a major power generation customer.
• Urgent requirement, with the potential for a prompt start subject to project confirmation.