OT Cyber Security SME

OT Cyber Security & NIS2 SME

• Outside IR35

We are seeking an experienced OT Cyber Security SME to support a leading European industrial manufacturer with their NIS2 compliance programme.

The role requires someone with strong expertise across both OT cyber security and NIS2, along with the ability to translate regulatory requirements and security frameworks into practical, implementable controls across complex and multi-site industrial environments.

Key Responsibilities

• Translate NIS2 requirements into practical OT security controls and implementation plans.
• Assess existing OT environments, identify compliance gaps and define remediation actions.
• Work with Cyber, IT, OT, Engineering and operational stakeholders to embed security requirements.
• Apply frameworks such as IEC 62443, NIST CSF and NCSC CAF.
• Develop pragmatic approaches to securing legacy OT environments, including compensating controls where traditional IT security measures are not viable.
• Support consistent compliance delivery across multiple European sites, defining ownership, actions and evidence requirements.

Essential Experience

• Strong hands-on expertise in OT / ICS cyber security and NIS2.
• Experience translating regulatory requirements, standards or security frameworks into practical OT controls.
• Strong knowledge of IEC 62443 and OT/IT security architecture.
• Understanding of network segmentation, secure remote access, IAM/PAM, vulnerability management, asset discovery and OT monitoring.
• Background in manufacturing, energy, utilities, process industries or critical infrastructure.
• Excellent stakeholder engagement skills, particularly with engineering and operational teams.
• Experience working across multi-site or international environments.

Desirable

• Previous NIS2 or NIS implementation experience.
• Experience with legacy OT environments and compensating controls.
• European regulatory exposure or experience within industrial manufacturing.

The ideal candidate will combine genuine OT cyber security expertise with a strong understanding of NIS2, focusing on making regulatory requirements workable in live industrial environments where safety, availability and legacy technology are critical considerations.

More details available on successful application.