Head of OT & ICS Security Testing

Location: Hybrid or remote from an hirify.global office or home location within UK&I, Greece, the US, Mexico, Kuala Lumpur or APAC; regular domestic and international travel to client sites, offices and industry events is required. International travel and occasional out-of-hours or weekend work may be required for client testing windows.

Company

hirify.global is a global assurance and risk management partner providing assurance, certification, cybersecurity, inspection and training services in more than 50 countries.

What you will do

• Own the OT and ICS security testing proposition, methodology and safety-first standards for live plant, production and control environments.
• Align the service line with IEC 62443, NIS2 and sector regulations, and build the labs, tooling and reference environments required for safe testing.
• Lead technical sales activities, including client scoping, bids, proposals and presentations to technical and executive stakeholders.
• Lead, develop and retain pod leads and consultants, defining technical direction, career pathways and certification plans.
• Deliver personally on client engagements against a 40% utilisation target while maintaining hands-on technical credibility.
• Adopt and govern AI tooling, support cross-skilling across offensive service lines, and grow a profitable service line through pooled resourcing and cross-selling.

Requirements

• Substantial hands-on OT and ICS security assessment experience in live operational environments with a demonstrable safety-first approach.
• Working knowledge of IEC 62443, industrial protocols and industrial architectures.
• Recognised certification such as GICSP, GRID, IEC 62443 or an equivalent qualification.
• Experience leading technical teams and supporting sales in OT/ICS environments.
• For UK & Ireland: right to work in the UK and eligibility for UK security clearance at SC level where required.
• Regional employment eligibility, applicable background screening and the ability to travel internationally are required; US federal or state contractual requirements may also apply.

Nice to have

• Engineering or process control background.
• Experience with OT SOC, detection and monitoring propositions.
• Sector experience in energy, utilities, maritime or manufacturing.
• Experience building a new service line and driving cross-selling from other cyber or assessment services.
• Regional language capability for Greece, Kuala Lumpur and wider APAC.

Culture & Benefits

• Flexible working arrangements where applicable, including hybrid and remote options aligned to delivery regions.
• Collaborative global working environment with opportunities for professional growth.
• 5x5x5 development model providing five training days, £5,000 of funding and five certifications per consultant per year.
• Competitive market-aligned salary and comprehensive benefits package.
• Pre-employment checks may include identity, right-to-work, employment history, education and criminal-record verification where permitted by law.