Senior Cyber and OT Security Consultant - UK remote - £100k + bens
An opportunity for an experienced Cyber Security Consultant to join a growing consultancy, supporting clients in managing information security risks across complex IT and Operational Technology (OT) environments.
You do not need to be an OT security specialist but this role would suit someone with a solid background in information security consulting, risk management and recognised security frameworks is essential, while familiarity with industrial environments and OT security standards would be an advantage.
The Role
Working as a Senior Consultant, you will deliver practical cyber security advice, helping clients understand their risks, identify weaknesses and develop proportionate security improvements.
Your responsibilities will include:
Managing client engagements and building trusted relationships with IT Directors and other senior stakeholders.
Assessing information security risks, reviewing existing controls and identifying areas for improvement.
Advising on security strategy, governance, risk management and the implementation of good practice.
Applying recognised frameworks and standards, including ISO 27001, NIST Cybersecurity Framework (NIST CSF) and the NCSC Cyber Assessment Framework (CAF).
Supporting existing OT security engagements, learning the client environments and progressively assuming responsibility for their ongoing delivery.
Adapting quickly between clients, industries and assignments in a consultancy environment.
Identifying opportunities to add value for clients and supporting the development of longer-term consulting relationships.
What We're Looking For
You will have a strong grounding in information security, with enough breadth to understand the relationships between technology, business risk, governance and operational resilience.
Essential experience and attributes include:
Cyber security consulting: Experience delivering security assessments, risk reviews or advisory engagements, ideally within a consultancy or professional services environment.
Risk management: A solid understanding of information security risk assessment, risk treatment, security controls and governance.
Security frameworks: Practical knowledge of ISO 27001, NIST CSF and/or the NCSC Cyber Assessment Framework. You should be comfortable applying frameworks to real client environments rather than simply discussing them theoretically.
Independent delivery: The maturity, initiative and adaptability to manage your own work, investigate unfamiliar issues and deliver quality outcomes with limited supervision.
Professional judgement: An understanding of when to provide advice independently and when to involve technical specialists or seek further expertise.
Professional qualifications such as CISSP or CISM would be advantageous, but practical experience, sound judgement and the ability to apply security principles effectively are more important than collecting certifications.
You do not need decades of experience. We are looking for someone who has developed sufficient consulting capability to operate confidently at Senior Consultant level and take responsibility for client engagements.
The initial focus will be supporting an established portfolio of clients with OT security requirements. Previous exposure to industrial environments, manufacturing, critical infrastructure or industrial control systems would therefore be beneficial.
Knowledge of IEC 62443, industrial control system security, OT risk assessment or the differences between IT and OT security would be particularly useful.
You should be comfortable working alongside technical specialists and using their expertise to inform sound, commercially sensible recommendations.
The Right Person
This opportunity will suit someone who enjoys and has experience in 3rd part consultancy and the variety it brings.
You will be comfortable walking into a client meeting, asking intelligent questions, understanding the problem and working through the detail. You can establish trust without overstating your expertise, communicate confidently with senior stakeholders and remain adaptable when client requirements change.
Please apply to me asap with a CV! This role is open to UK eligible workers. Sadly VISA support is not available. You'll need full and permanent right to work in the UK, unsupported by VISA or a separate VISA. This role is expected to have some reasonable and fully expensed travel.
Sound like you? Apply now - or connect with us on LinkedIn (UK candidates only please) - Tariq Dirania
Circle Recruitment is acting as an Employment Agency in relation to this vacancy. Earn yourself a referral bonus if you refer somebody else who fills the role! We also offer an iPad if you refer a new client to us and we recruit for them. Follow us on Facebook - Circle Recruitment , Twitter - @Circle_Rec and LinkedIn - Circle Recruitment.
