OT Security Consultant
We are seeking an experienced OT Security Consultant to support the delivery of cyber security initiatives across complex Operational Technology (OT) environments.
The successful candidate will play a key role in identifying security risks, strengthening OT security controls and supporting the implementation of cyber security frameworks across industrial systems and critical infrastructure.
Key Responsibilities
-
Conduct comprehensive OT cyber security risk assessments, security reviews and gap analyses.
-
Assess and improve security controls across SCADA, ICS, PLC, DCS and industrial control environments.
-
Design and implement OT security strategies, architectures and remediation roadmaps.
-
Perform OT vulnerability assessments and identify potential threats across industrial networks.
-
Develop and maintain OT cyber security policies, standards, procedures and governance frameworks.
-
Support compliance with IEC 62443, NIST CSF, ISO 27001 and relevant industry regulations.
-
Provide technical guidance on OT network segmentation, firewalls, secure remote access and access management.
-
Review existing OT architectures and recommend improvements to strengthen security posture.
-
Support OT asset discovery, asset inventory management and security classification.
-
Conduct security maturity assessments and develop actionable recommendations.
-
Assist with OT incident response planning, cyber resilience and disaster recovery strategies.
-
Identify and assess third-party and vendor security risks within OT environments.
-
Support the implementation of OT security monitoring, threat detection and vulnerability management solutions.
-
Collaborate with engineering, infrastructure, operations and cyber security teams to ensure security requirements are embedded into operational environments.
-
Prepare technical documentation, security assessment reports, risk registers and remediation plans.
-
Engage with business stakeholders to communicate security risks, findings and recommendations.
Skills & Experience
-
Demonstrated experience in OT/ICS cyber security consulting, engineering or security architecture.
-
Strong understanding of Operational Technology environments, including SCADA, ICS, PLC and DCS systems.
-
Experience conducting OT security risk assessments, security audits and vulnerability assessments.
-
Strong knowledge of IEC 62443, NIST CSF, ISO 27001 and relevant OT security frameworks.
-
Understanding of industrial communication protocols such as Modbus, DNP3, OPC UA and IEC 60870-5-104.
-
Experience with OT network security, segmentation, firewalls and secure remote access solutions.
-
Knowledge of OT asset discovery, vulnerability management and security monitoring technologies.
-
Familiarity with OT security platforms such as Claroty, Nozomi Networks or Microsoft Defender for IoT.
-
Experience developing OT security strategies, policies, standards and security improvement roadmaps.
-
Understanding of Australian critical infrastructure regulations, including the SOCI Act.
-
Experience supporting OT security incident response, threat modelling and cyber resilience initiatives.
-
Knowledge of IT/OT convergence and the security challenges associated with interconnected environments.
-
Experience working across utilities, energy, water, manufacturing, transport or critical infrastructure environments.
-
Ability to translate complex technical security risks into practical business recommendations.
-
Strong stakeholder engagement, communication and technical documentation skills.
-
Relevant certifications such as GICSP, CISSP, CISM or IEC 62443 qualifications will be highly regarded.
What’s on Offer
-
Opportunity to work on complex OT cyber security initiatives.
-
Exposure to critical infrastructure and industrial technology environments.
-
Work alongside experienced cyber security, engineering and operational teams.
-
Contribute to improving the security and resilience of essential operational systems.
Apply Now
If you are an experienced OT Security Consultant with a strong background in industrial cyber security and critical infrastructure, we would love to hear from you.
Apply now and Ronald may be in contact to discuss the opportunity further.