Security Manager

Role overview

Key responsibilities

• Lead engagements from client discovery and solution design through delivery and implementation.
• Advise clients on security strategy, operating models, risk, architecture, and transformation.
• Conduct assessments, maturity reviews, gap analyses, and risk assessments across OT environments.
• Prepare executive recommendations, roadmaps, business cases, and cybersecurity strategies.
• Apply frameworks and standards including IEC 62443, NIST, NERC CIP, and ISO 27001/27019.
• Guide architecture, segmentation, secure remote access, asset management, monitoring, vulnerability management, and incident preparedness.
• Assess vendor and OEM solutions, architectures, and security capabilities.
• Lead multidisciplinary teams and manage quality, timelines, and stakeholder relationships.
• Support proposals, RFP responses, workshops, thought leadership, and development of OT cybersecurity offerings.
• Advise senior client stakeholders and translate emerging threats, technologies, regulations, and trends into client solutions.

Experience and qualifications

• 8–12+ years of cybersecurity experience, including significant OT/ICS cybersecurity experience.
• Track record leading OT cybersecurity consulting engagements for industrial and critical infrastructure organizations.
• Strong understanding of OT/ICS environments, architectures, industrial protocols, and control systems.
• Experience with OT OEMs, system integrators, and technology vendors.
• Deep knowledge of OT cybersecurity frameworks, particularly IEC 62443 and NIST.
• Experience developing OT strategies, architectures, assessments, roadmaps, and transformation programs.
• Strong client-facing consulting, stakeholder management, executive communication, analytical, problem-solving, and presentation skills.
• Ability to lead teams and manage complex consulting engagements.
• GICSP, GRID, CISSP, CISM, ISA/IEC 62443, or equivalent certifications are highly desirable.
• Experience in energy, oil and gas, utilities, manufacturing, mining, or other critical infrastructure is strongly preferred.