Overview of the role:

This role is responsible for leading cybersecurity design, implementation, and assurance across complex OT and critical infrastructure environments. The position ensures that security is embedded throughout the project lifecycle, from architecture and risk assessment through to implementation, monitoring, and compliance.

The candidate will act as a subject matter expert across multiple engagements, advising on secure architecture, enforcing security controls, and ensuring alignment with regulatory and industry standards. The role requires strong experience in OT cybersecurity, including system hardening, network segmentation, logging/SIEM integration, and vulnerability management.

In addition, the role is accountable for delivering high-quality cybersecurity documentation, maintaining risk registers, and supporting audit and compliance activities. The position also plays a key role in stakeholder coordination, ensuring that vendors, engineering teams, and project stakeholders align with defined cybersecurity requirements.

Ideal Candidate Profile:

A highly experienced cybersecurity professional with strong OT/ICS domain expertise, capable of independently leading cybersecurity deliverables for large-scale and high-complexity environments, while ensuring compliance, risk reduction, and secure system operations.

What you will do:

To lead the design, implementation, and assurance of cybersecurity controls across critical infrastructure and OT environments, ensuring secure-by-design delivery, regulatory compliance, and risk-based security governance.

RESOURCE COMPLEXITY

• Works as a technical lead / SME across multiple projects

• May provide matrix leadership to engineers and specialists

• Responsible for high-impact OT environments and compliance deliverables

Key Accountabilities

• Lead secure design and architecture for OT environments, ensuring best-practice cybersecurity controls are embedded from the outset

• Conduct and manage risk assessments, maintaining risk registers and driving mitigation through to closure

• Oversee implementation of security controls and system hardening across infrastructure, networks, and endpoints

• Establish monitoring and logging capabilities, ensuring integration with centralized visibility platforms (e.g., SIEM)

• Govern patching and vulnerability management processes to maintain secure and up-to-date systems

• Ensure compliance with relevant cybersecurity standards and frameworks, supporting audits and evidence requirements

• Produce and manage key cybersecurity deliverables and documentation, ensuring quality and acceptance

• Coordinate with stakeholders and vendors to embed cybersecurity across all project and operational activities

Required skills to be successful: 

• OT/ICS security architecture and controls

• Network and system hardening

• SIEM/logging integration

• Risk and compliance frameworks

• Cybersecurity documentation and audit support

Must have knowledge and expertise in the following standards:

• DESC ICS Security Standard (2019)

• CLC/TS 50701 (Aug 2023)

• PCI DSS v4.0 (Mar 2022)

• IEC 62443

• NIST Cybersecurity Framework (CSF)

• NIST SP 800-82 (ICS security guidance)

• EN 50126/50128/50129