OT Assurance Consultant (Cybersecurity)

Location: Hybrid in Glasgow or Aberdeen, Scotland, United Kingdom

Company

Business technology consultancy delivering platforms, data, and business application solutions for the energy, public, and finance sectors.

What you will do

• Design, develop, and embed OT cyber assurance frameworks and structured assurance programmes.
• Plan and deliver stakeholder interviews, workshops, documentation reviews, security assessments, audits, evidence gathering, and control validation.
• Assess security controls across OT environments, identify vulnerabilities and assurance gaps, and develop risk-based improvement recommendations.
• Evaluate OT security arrangements against NCSC Cyber Assessment Framework, IEC 62443, NIST, and other recognised standards.
• Produce assurance reports and present technical findings, risks, recommendations, and progress updates to stakeholders and senior management.
• Collaborate with OT engineers, asset owners, cyber security specialists, and operational teams while contributing to continuous improvement of assurance methodologies and governance.

Requirements

• Experience designing, developing, and implementing cyber security assurance frameworks and structured assurance programmes.
• Strong knowledge of Operational Technology environments, including industrial control systems, SCADA, operational networks, and supporting infrastructure.
• Experience with security assessments, audits, evidence gathering, control validation, risk management, and security governance.
• Understanding of OT-specific threats, vulnerabilities, attack vectors, compensating controls, and operational security constraints.
• Strong analytical, report-writing, communication, facilitation, and stakeholder management skills.
• Successful completion of BPSS screening is required.

Nice to have

• Knowledge or experience with NCSC Cyber Assessment Framework, IEC 62443, NIST Cybersecurity Framework, NIS Regulations, or ISO 27001.
• Experience in critical national infrastructure, utilities, energy, manufacturing, or other industrial environments.
• Experience supporting regulatory or compliance-driven cyber assurance programmes.

Culture & Benefits

• Personalised career development plans and learning opportunities.
• Flexible working arrangements to support work-life balance.
• Generous annual leave and enhanced family-friendly benefits.
• Pension scheme and access to private health, wellbeing, and insurance schemes.
• Inclusive workplace with equal opportunities and support for accessibility adjustments during hiring.