Security Manager

Role overview

Key responsibilities

• Lead engagements from client discovery and solution design through delivery and implementation.
• Advise on OT cybersecurity strategy, operating models, risk management, architecture, and transformation.
• Conduct OT cybersecurity assessments, maturity reviews, gap analyses, and risk assessments.
• Develop and present executive recommendations, roadmaps, business cases, and cybersecurity strategies.
• Apply standards and frameworks including IEC 62443, NIST, NERC CIP, and ISO 27001/27019.
• Lead technical work across architecture, network segmentation, secure remote access, asset management, monitoring, vulnerability management, and incident preparedness.
• Assess solutions and security capabilities with OT vendors and OEMs.
• Lead multidisciplinary teams and ensure high-quality, timely delivery and stakeholder management.
• Support business development with proposals, RFP responses, workshops, thought leadership, and new offerings.
• Build senior client relationships and advise on OT cybersecurity.
• Monitor emerging threats, technologies, regulations, and industry trends and translate findings into client solutions.

Experience and qualifications

• 8–12+ years of cybersecurity experience, including significant OT/ICS cybersecurity experience.
• Proven leadership of OT cybersecurity consulting engagements for industrial or critical-infrastructure organizations.
• Strong understanding of OT/ICS environments, architectures, industrial protocols, and control systems.
• Experience with OT OEMs, system integrators, and technology vendors.
• Deep knowledge of OT cybersecurity frameworks, particularly IEC 62443 and NIST.
• Experience developing strategies, architectures, assessments, roadmaps, and transformation programs.
• Strong client-facing consulting, stakeholder management, executive communication, analytical, problem-solving, and presentation skills.
• Ability to lead teams and manage complex consulting engagements.
• GICSP, GRID, CISSP, CISM, ISA/IEC 62443, or equivalent certifications are highly desirable.
• Relevant sector consulting experience is preferred in energy, oil and gas, utilities, manufacturing, mining, or other critical infrastructure.