Principal Cyber Security OT Consultant

About you

• Extensive OT Cyber Security Experience: Proven experience delivering technical cyber security consultancy in OT environments (e.g. energy, utilities, transportation). This includes a deep understanding of the unique risks in OT systems versus IT systems. You should have a strong track record implementing security in industrial control system contexts and securing critical national infrastructure.
• Leadership & Delivery: Demonstrable ability to spearhead teams and manage complex security engagements on live industrial sites. Experience conducting engagements on operational plants – including performing risk assessments and deploying appropriate security controls – is required. You can coordinate multiple projects concurrently, delivering results that meet client priorities and deadlines.
• Exceptional Communication Skills: Excellent verbal and written communication skills. You listen actively to client needs and can explain complex cyber security concepts in clear, non-technical language. Able to confidently present to both engineers and C-suite stakeholders, adjusting your approach to suit the audience.
• Project Management & Stakeholder Engagement: Outstanding organisational skills with the ability to juggle multiple tasks and projects at once. Delivers high-quality work under pressure, consistently meeting tight deadlines. Capable of balancing business and client priorities while effectively managing stakeholder expectations.
• Teamwork & Collaboration: A proven team player who can also take initiative and spearhead. Able to work effectively both independently and within multidisciplinary teams in a complex, matrix organisation. You foster collaboration and can influence without direct authority when working across different teams or departments.
• Technical Mastery in OT: In-depth knowledge of the OT system lifecycle – how OT systems are specified, procured, designed, deployed, and operated – and how to embed cyber security best practices into each stage. Hands-on experience with security technologies commonly used in industrial control systems and SCADA environments is expected.
• Standards & Regulatory Knowledge: Strong familiarity with OT security standards and frameworks such as IEC 62443 and NIST CSF, and with relevant regulations like the NIS Regulations and HSE OG-0086. Ability to apply these frameworks in practice and guide organisations through compliance and accreditation processes.
• Security Clearance & Travel: Ability to obtain the necessary UK security clearance for working on sensitive projects (this will be discussed and processed as needed). Willingness to travel throughout the UK to client sites, with flexibility for short-term travel as required.
• Certifications & Professional Memberships: Possession of industry certifications with a focus on OT security is highly desirable. Examples include GIAC Global Industrial Cyber Security Professional (GICSP) or ISA/IEC 62443 certifications for OT, and more general certifications like CISSP or CISM. Chartered or full membership of relevant professional bodies (e.g. IISP, BCS, IET) is also advantageous.
• Thought Leadership & Industry Involvement: Active involvement in the cyber security community – such as publishing articles, speaking at conferences, or contributing to standards – will be seen as a plus. This demonstrates a commitment to the field beyond day-to-day project work and aligns with the thought leadership aspect of the role. A self-driven attitude with a keen interest in emerging technologies and security innovations. You keep up to date with the latest developments in OT cyber security and are committed to continuous professional development and skill enhancement.
• Specialist Expertise: Deep expertise in at least one relevant sub-domain of cyber or information security (for example, security architecture design, incident response, cyber risk management, security training, or policy development) is a bonus. This could be demonstrated by significant project experience or thought leadership in that area. Such expertise complements the broad knowledge required and can enhance our team's capabilities.