Principal Security Consultant - OT

We’re working with a specialist organisation to appoint a Principal Security Consultant to act as a strategic authority across IT and OT security
. This is a senior, client-facing role focused on strategy, architecture, and large-scale transformation
, rather than day-to-day delivery.

You’ll own security strategy and enterprise reference architectures across complex IT/OT estates, leading multi-year transformation programmes aligned to IEC 62443, NIS/NIS2, and NCSC CAF
. Operating with a high degree of autonomy, you’ll advise executives, regulators, and delivery teams on how to improve security maturity and resilience at scale.

• Define security strategy, governance, and target architectures across IT/OT
• Lead and chair design authorities and security design boards
• Sponsor and steer security maturity and transformation programmes
• Provide executive assurance across delivery portfolios and supplier ecosystems
• Set quality gates, standards, and continuous improvement mechanisms
• Lead executive and regulator briefings in regulated environments
• Embed cyber-aware behaviours including continuous monitoring, threat-informed defence, and strong access discipline
• Ensure audit readiness and alignment to IEC 62443, Purdue model, NIS/NIS2, and NCSC CAF
• 10–15+ years in cyber security, including 5+ years at senior consultant or leadership level
• Proven experience shaping enterprise-scale IT/OT security strategies
• Strong background working across regulated or critical infrastructure environments
• Comfortable operating as a trusted advisor to executives and boards
• Able to balance strategic authority with pragmatic delivery oversight

• ISACA CISM
• GICSP (OT)
• Cisco CCIE or industrial networking certifications (desirable, not essential)

If you think you are a strong match please apply and I will reach out with more information.