OT Cyber Security Senior Manager

About the Company

Our client, has an Operational Technology Security practice that protects critical infrastructure and industrial environments from cyber threats across Energy, Utilities, Chemicals, Natural Resources, Manufacturing, Aerospace and Defence. The UK practice was established 12-18 months ago and has grown to around 18 people, and it is now scaling.

About the Role

They are looking for a Senior Manager who combines energy and commercial presence with real technical credibility. You will become a trusted advisor to clients, own end-to-end delivery of large programmes, look after your team and help grow the practice's footprint in the market. You will work with Critical National Infrastructure (CNI) clients and industrial organisations facing sophisticated OT security challenges.

Responsibilities

• Role Details

• Operational Technology Security practice

• Level: Senior Manager

• Locations: London, Birmingham, Manchester, Edinburgh (UK). Candidates should be able to commute to London about once a week, plus client site visits as needed.

• Working pattern: Full time, hybrid

• Salary: Competitive salary and package, depending on experience

• Reports to: Head of OT Cyber Security

• Security clearance: Candidates must be SC eligible. Any offer is subject to satisfactory BPSS and SC clearance, which requires 5 years of continuous UK address history, typically with no period of 30 consecutive days or more spent outside the UK, at the point of application. This relates to a specific client requirement.

• Client delivery and leadership

• Become a trusted advisor to client stakeholders, including senior leaders, building long-term, trust-based relationships.

• Own end-to-end delivery of large OT security programmes in regulated environments, managing timelines, budgets and security standards.

• Run cybersecurity strategy assessments, readiness evaluations and discovery workshops using industry frameworks and compliance mandates.

• Identify and communicate risks at project, business and technical levels, and propose proportionate, cost-effective mitigations.

• Technical expertise

• Analyse the architecture of Industrial Control Systems (SCADA, DCS, IIoT), identify vulnerabilities and recommend improvements.

• Design and implement cybersecurity solutions tailored to ICS environments.

• Develop ICS security control frameworks based on best practice and international standards (NIST, ISO 27001, IEC 62443).

• Produce key deliverables: threat and risk assessments, security policies and procedures, assurance management plans and compliance evidence.

• Team and practice growth

• Look after your team, mentoring members through line and matrix management with guidance, knowledge sharing and skills development.

• Help grow the practice and its footprint in the market by finding opportunities in existing accounts and building new client relationships.

• Contribute to thought leadership in OT security through publications, presentations and client engagements.

Qualifications

• 10+ years' experience in OT/ICS cybersecurity or critical infrastructure security.

Required Skills

• Hands-on OT security industry experience, for example in Manufacturing, with time spent on plants and sites.
• Ability to speak the language of engineers and build credibility with operational and engineering teams.
• A consulting mindset: commercial awareness, structured delivery and a client-first approach.
• Proven record of leading complex security programmes in regulated industrial environments.
• Deep understanding of Industrial Control Systems (SCADA, DCS, PLC, IIoT) and their security challenges.
• Strong familiarity with OT security regulations and frameworks (NIS, NIS2, CAF, CRA).
• Confidence working with senior leaders and executive stakeholders as well as technical teams (engineers, IT).
• Excellent communication skills, with the ability to translate technical risk into business impact.
• SC eligibility, with 5 years of UK address history.
• Willingness to travel across the UK as projects require.

Preferred Skills

• A consulting background combined with OT security knowledge. Strong OT security practitioners from non-consulting backgrounds who are commercially switched on will also be considered.
• Certifications: GICSP, IEC 62443, CISSP, GRID.
• Experience across multiple sectors: Energy, Utilities, Manufacturing, Aerospace, Defence or CNI.
• Knowledge of NERC-CIP and IEC/ISA 62443.
• Background in both advisory work and hands-on technical implementation.

Pay range and compensation package

• Competitive salary and package, depending on experience.
• A competitive salary, up to 30 days' annual leave, private medical insurance, and 3 extra days' leave per year for charitable work.