OT Security Engineer

My client is a global IT consultancy recruiting for a OT Security Engineer

The role is Full time onsite in Aberdeen

Inside IR35

Target start date: 02-Nov-26
Duration: 12-months

Job Description: OT Security Engineer
Job Purpose
Lead and coordinate OT cybersecurity assessment, risk remediation, and control improvement activities across operational environments. The role will translate identified security gaps and risks into practical remediation plans, implemented controls, approved documentation, and sustainable assurance evidence.

Key Responsibilities

. Develop and maintain integrated OT cybersecurity remediation plans, including priorities, dependencies, ownership, milestones, and progress tracking.
. Coordinate with operational sites, OT/ICS engineers, Technical Authorities, Cyber Defence, IT, vendors, and business stakeholders to drive remediation activities.
. Establish and maintain accurate OT asset inventories, including system ownership, criticality, dependencies, connectivity, and network documentation.
. Strengthen identity and access management across OT environments, including privileged access, shared accounts, MFA, and role based access controls.
. Develop secure configuration and system hardening baselines and assess compliance across critical OT systems.
. Establish and improve OT vulnerability and patch management processes, including risk based prioritisation and compensating controls for Legacy or unsupported systems.
. Review OT network architecture, segmentation, zones, conduits, data flows, dependencies, and potential single points of failure.
. Improve security monitoring and detection capabilities through enhanced logging coverage, secure log management, central monitoring, and defined alert and escalation processes.
. Develop and maintain OT incident response, business continuity, backup, recovery, and resilience arrangements.
. Coordinate backup verification, restoration testing, cybersecurity exercises, and lessons learned activities.
. Develop and maintain relevant OT cybersecurity policies, standards, procedures, and role based awareness/training.
. Support integration of cybersecurity risks with broader operational, physical security, and business resilience risk management processes.
. Maintain structured security assurance and evidence repositories covering assessments, approvals, testing, risk treatment, training, and remediation activities.
. Prepare progress reporting, risk updates, remediation status, and assurance material for management and relevant stakeholders.

Principal Deliverables

. OT cybersecurity gap closure and remediation roadmap.
. Remediation progress and risk tracking dashboard.
. Updated OT asset inventory and network documentation.
. Privileged access inventory and access review process.
. Secure configuration and system hardening standards.
. OT vulnerability, patching, and Legacy system risk management process.
. Security logging and monitoring coverage assessment.
. OT incident response and business continuity plans.
. Backup verification and recovery testing arrangements.
. Cybersecurity exercise plans and documented lessons learned.
. Security assurance and remediation evidence supporting internal or external assessments.

Required Experience and Knowledge

. Strong experience in OT/ICS/PCD cybersecurity within operational, industrial, or critical infrastructure environments.
. Experience supporting cybersecurity assessments, risk management, remediation, or control improvement programmes.
. Strong practical knowledge of: OT asset and configuration management Identity and privileged access management OT network segmentation and secure architecture System hardening and secure configuration Vulnerability and patch management Security logging, monitoring, and detection Incident response and cyber resilience Backup, recovery, and continuity planning
. Ability to translate cybersecurity findings and technical risks into practical, risk based remediation actions.
. Experience working with Legacy OT systems where conventional IT security controls may not always be technically or operationally feasible.
. Strong stakeholder coordination and communication skills across engineering, operations, cybersecurity, IT, and third party providers.
. Strong documentation, risk management, and security assurance capabilities.

Desirable Experience

. Experience within oil and gas, energy, manufacturing, utilities, or other critical infrastructure environments.
. Familiarity with recognised OT and cybersecurity frameworks and standards such as IEC 62443, NIST CSF, ISO/IEC 27001, or equivalent.
. Experience with OT security monitoring, SIEM, vulnerability management, asset inventory, network management, and endpoint/security technologies.
. Relevant professional certification such as CISSP, CISM, GICSP, IEC 62443, or equivalent cybersecurity/OT security qualifications.
. Experience coordinating multi stakeholder cybersecurity improvement or remediation programmes.

Key Success Measures

. Delivery of agreed high priority OT cybersecurity remediation activities within defined milestones.
. Improved visibility and management of OT cybersecurity risks, assets, dependencies, and control gaps.
. Remediation supported by appropriate implementation and assurance evidence.
. Clear ownership, risk treatment, and dependency management for outstanding actions.
. Effective testing of backup, recovery, resilience, and incident response arrangements.
. Sustainable cybersecurity processes and controls transitioned into business as usual operations.