OT Security Manager

Role overview

Key responsibilities

• Lead OT/ICS engagements from assessment and strategy through architecture, remediation, and implementation.
• Assess industrial systems and assets, including ICS, SCADA, DCS, PLCs, HMIs, engineering workstations, historians, networks, and IIoT.
• Lead maturity, risk, gap, and site-level security assessments; develop strategies, governance, roadmaps, and remediation programs.
• Design segmented OT architectures, security zones and conduits, industrial DMZs, and controlled IT/OT connectivity.
• Advise on asset discovery, vulnerability management, secure remote and privileged access, network monitoring, and endpoint protection.
• Implement controls that preserve production availability, process safety, and operational requirements; develop incident response and cyber-resilience capabilities.
• Assess legacy-system risks and lead IT/OT convergence, adapting enterprise controls for operational environments.
• Lead multidisciplinary teams, engage client stakeholders, facilitate workshops and presentations, support proposals and pursuits, and develop OT security offerings.

Experience and qualifications

• 8–12+ years of cybersecurity, industrial automation, or OT experience, with significant hands-on OT/ICS cybersecurity exposure.
• Practical knowledge of SCADA, DCS, PLCs, HMIs, historians, and industrial control networks.
• Experience delivering OT security assessments, architecture, transformation, or implementation programs.
• Strong understanding of OT segmentation, industrial DMZs, firewalls, remote access, asset discovery, vulnerability management, and monitoring.
• Experience applying ISA/IEC 62443; understanding of legacy systems, industrial availability, and process safety.
• Strong consulting, stakeholder management, executive communication, and multidisciplinary team leadership capabilities.
• Experience supporting proposals, RFP responses, solution shaping, and business development.
• Critical-infrastructure sector experience is strongly preferred; ISA/IEC 62443, GICSP, CISSP, CISM, or equivalent certifications are advantageous.