Information Security Consultant (OT)
An information security consultant specialising in Operational Technology/ICS at Waterstons, delivering security assessments, risk reviews, architecture reviews and advisory work for energy-sector clients against frameworks like IEC 62443, NIST CSF/SP 800-82 and NCSC CAF. Needs 3+ years cyber security experience; based in or near Glasgow with 2-3 days/week on client sites.
- Compensation
- Not disclosed
- Location
- Glasgow, GB
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Minimum 3 years relevant cyber security experience specialising in OT and ICS
- Practical experience of OT architecture, industrial control systems, industrial automation, network segmentation and recognised OT security good practice
- Basic understanding of UK cyber security legislation/regulation for energy and utilities, incl. NIS Regulations and NCSC Cyber Assessment Framework
- Experience enhancing security risk methodologies and conducting risk assessments (threats, vulnerabilities, proportionate mitigations)
- Practical knowledge of ISO 27001, NIST, IEC 62443, UK GDPR and NCSC CAF, with experience delivering security audit and assurance activities
- Based in Glasgow region or willing to travel to client sites in/around Glasgow 2-3 days per week
- Willing and eligible to undergo background security screening and SC clearance where required
Nice to have
- IEC ISA 62443 fundamental cyber security certificate
- Experience with Cyber Assessment Framework, NIST CSF, NIST SP 800-82, IEC ISA 99/62443 and CIS Controls
- ISO 27001 lead auditor/implementer qualifications
- Basic understanding of IT and OT security risks
- Knowledge of the threat landscape
- Existing Security Check (SC) clearance
Full description
Who you’ll be joining
We’re problem solvers at heart. Sometimes the answer is technology, sometimes it is strategy, and sometimes it is a strong cup of tea and a bit of thoughtful conversation. Whatever it takes, we work it out with our clients.
We’re an IT consultancy that helps organisations get the best out of their technology. That means keeping them secure and keeping the bad guys out, making sure everything works and is easy to use, and doing smart things with data and software to give their business an edge. It is important work, and we care about doing it well and for the right reasons.
Life at Waterstons is friendly, flexible and built on trust. We hire people who are curious, thoughtful and good at getting to the heart of a problem. You get support, trust and room to grow in a place that still feels human. The unlimited holidays and private healthcare are a nice touch, although most people stay because it feels like the right place to do good work with good people.
What You’ll Be Doing
As an Information Security Consultant, with a minimum of three years relevant cyber security experience specialising in Operational Technology and Industrial Control Systems, you will help clients understand and improve the security of their industrial systems and operational environments. Working alongside senior consultants and principals, you will deliver security assessments, risk reviews, governance activities and advisory engagements across the energy sector.
You’ll be helping multiple clients with different aspects of their security. The role is interesting and varied and a great opportunity for those that prefer spontaneity over routine.
The successful candidate will ideally be based within the Glasgow region or be willing and able to travel to client sites in and around Glasgow for a minimum of two to three days per week, as required by the client.
Your Day-to-Day
- Supporting and delivering OT cyber security assessments and reviews.
- Conducting OT and ICS risk assessments.
- Contributing to security architecture and secure-by-design reviews.
- Delivering assessments against frameworks such as IEC 62443, NIST CSF, NIST SP 800-82 and the NCSC CAF.
- Producing high-quality reports and client deliverables.
- Supporting workshops, interviews and stakeholder meetings.
- Working with colleagues to develop practical recommendations.
- Building and maintaining knowledge of OT cyber security threats, vulnerabilities and good practice.
What we're looking for
If some (or most) of the following sound like you, we'd love to hear from you: