OT Security Manager

Role overview

Responsibilities

• Lead engagements from assessment and strategy through architecture, remediation, and implementation across industrial and critical infrastructure environments.
• Assess ICS, SCADA, DCS, PLC, HMI, engineering workstation, historian, industrial network, and IIoT environments.
• Lead maturity, risk, gap, and site-level security assessments; develop strategies, roadmaps, governance models, and remediation programs.
• Design secure OT architecture, including segmentation, zones and conduits, industrial DMZs, and controlled IT/OT connectivity.
• Advise on asset discovery, vulnerability management, remote and privileged access, network monitoring, and endpoint protection.
• Implement controls that respect production availability, process safety, and operational requirements; develop incident response, monitoring, and resilience capabilities.
• Assess legacy-system risks and guide practical treatment where operational constraints limit patching or replacement.
• Apply ISA/IEC 62443 and NIST guidance; lead teams and client workshops, reviews, and executive presentations.
• Support proposals, RFPs, solution development, client pursuits, and development of OT security offerings.

Experience and qualifications

• 8–12+ years of cybersecurity, industrial automation, or OT experience, including significant hands-on OT/ICS cybersecurity exposure.
• Strong practical knowledge of SCADA, DCS, PLCs, HMIs, historians, and industrial control networks.
• Experience delivering OT security assessments, architecture, transformation, or implementation programs.
• Knowledge of IT/OT segmentation, industrial DMZs, firewalls, remote access, asset discovery, vulnerability management, and OT monitoring.
• Experience applying ISA/IEC 62443; understanding of legacy systems, industrial availability, and process safety.
• Critical-infrastructure sector experience is strongly preferred; consulting, stakeholder management, and executive communication capabilities are required.
• Ability to lead multidisciplinary technical teams and complex client engagements; proposal, RFP, solution-shaping, and business-development experience.
• ISA/IEC 62443, GICSP, CISSP, CISM, or equivalent certifications are advantageous.