OT Cyber Security Consultant

Key Responsibilities

• We have an immediate requirement for an OT Cyber Security Consultant to join our Bristol office and help clients understand, manage and reduce cyber security risks affecting operational technology, industrial control and safety-related systems.
• You will work with clients to understand their operational environment, identify proportionate security requirements and translate cyber risk into practical engineering solutions. The role requires an appreciation of the differences between operational technology and enterprise IT, including safety, availability, legacy technology and operational constraints.
• You will play a key role within multidisciplinary teams delivering challenging programmes across critical infrastructure, national security and other highly regulated sectors. You will communicate clearly with engineering, safety, operations and leadership stakeholders, often working alongside the client.
• You will manage assigned activities to time, cost and quality expectations, contribute to technical assurance and support the development of future business and long-term client relationships.
• Key activities will include:
• Deliver OT and industrial cyber security consultancy across client projects.
• Assess OT systems, architectures, interfaces and operational environments to identify threats, vulnerabilities and proportionate risk treatments.
• Identify and interpret applicable cyber security, safety, regulatory, contractual and organisational requirements.
• Apply recognised OT cyber security standards and good practice, including the IEC 62443 series where appropriate.
• Develop cyber security plans, requirements, risk assessments, assurance arguments and supporting evidence across the system lifecycle.
• Integrate cyber security activities with systems engineering, functional safety, commissioning, maintenance and operations.
• Support architecture reviews, supplier assessments, design reviews, verification and validation activities.
• Facilitate workshops and communicate complex technical risks clearly to technical and non-technical stakeholders.
• Contribute to proposals, client relationship development and the continued growth of our OT Cyber capability.
• Essentia l
• A degree, equivalent qualification or relevant professional experience in cyber security, systems engineering, control and instrumentation, electrical or electronic engineering, computer science, or a related discipline.
• Experience of cyber security within operational technology, industrial control systems or another engineering-led environment.
• Understanding of OT / ICS / IACS / CPS architectures, assets, protocols and operational constraints.
• Experience of cyber security risk assessment, requirements development, architecture assessment or assurance.
• Building OT networks, deploying configuring security hardware.
• Ability to produce clear, proportionate and auditable technical documentation.
• Solid analytical, problem-solving and engineering judgement.
• Good written and verbal communication skills, with the ability to engage clients and multidisciplinary teams.
• Ability to manage your own tasks and deliver to agreed time, cost and quality expectations.
• Desirable
• Practical knowledge of the IEC 62443 series.
• Experience in critical national infrastructure, energy, transport, defence, nuclear, utilities, manufacturing or other regulated sectors.
• Experience of integrating cyber security with functional safety or safety-related systems.
• Knowledge of OT network security, segmentation, zones and conduits, secure remote access, monitoring or incident response.
• Experience of legacy system assessment, supplier assurance, security architecture or secure-by-design activities.
• Relevant professional certification or training, such as IEC 62443, CISSP, CISM, GICSP or equivalent.
• Progress towards professional registration, such as Chartered Engineer, Incorporated Engineer or Chartered Cyber Security Professional.
• Experience supporting bids, proposals, client development or capability growth.
• Due to the nature of the work that Frazer-Nash Consultancy undertake, candidates will be required to undergo pre-employment screening and must be able to satisfy clearance criteria for UK National Security Vetting.
• Benefit s
• We provide our people with an excellent benefit and offering package that comprises:
• Competitive salary with yearly reviews
• 25 days holiday + the opportunity to buy 5 days.
• A company that has its heart in the right place and a welcoming work culture.
• Happy to talk flexible working
• Enhanced parental benefits
• Company pension scheme
• Targeted professional development
• Life assurance
• Private healthcare membership
• Bonus scheme linked into company performance
• Paid membership fees to a professional institution
• Support in attaining professional membership
• Cycle to work scheme
• Season rail ticket loan
• And further optional benefits you can tailor to your personal requirements