Head of OT & ICS Security Testing

Leads LRQA's operational technology and industrial control systems security testing service line, covering OT and
ICS assessments, OT penetration testing, IEC 62443-aligned reviews and supporting advisory across energy, utilities,
manufacturing, maritime and process industries. To establish and scale a safety-first OT and
ICS testing capability that allows industrial clients to understand and reduce cyber risk in live operational environments,
and to grow it into a differentiated, profitable service line that we cross-sell across LRQA Cyber.

Working conditions:

Hybrid or remote, aligned to an LRQA office or home location within one of the delivery regions (UK&I,
Greece, US, Mexico, Kuala Lumpur, APAC). Regular domestic and international travel to client sites, LRQA offices and
industry events. Occasional out-of-hours and weekend working to meet client testing windows. This is a billable leadership
role: the postholder carries a personal utilisation target alongside leadership accountabilities. Performance measures:

• Personal utilisation against the 40% target (approximately 8 days per month).
• Service line order intake, revenue and margin against plan.
• Pipeline contribution and win rate on opportunities where the postholder acts as technical sales lead.
• Delivery quality: client satisfaction, report quality, on-time delivery and no material quality escapes.
• Accreditation and scheme compliance status for the service line.
• People: retention, engagement, and completion of the 5x5x5 training model (5 days of allocated training time, £5k of funding and 5 certifications per consultant, per year).
• Contribution to the pooled operating model: consultant cross-skilling and successful redeployment across service lines.
• Reporting structure:
  Reports to the Head of Offensive Services. Peer to the Heads of the other four offensive service lines. Leads the team/pod leads and will have consultants reporting to them within the service line and, through them, consultants drawn from a pooled capability of approximately 100 offensive security consultants. Consultants are allocated against demand rather than held permanently within a single service line.
• Own the OT and IC testing proposition, methodology and safety-first testing standards for work in live plant, production and control environments.
• Align the service line to IEC 62443, NIS2 and sector regulation, and build the lab, tooling and reference environments needed to test safely.
• Act as a technical sales lead: shape scope with clients, support bids and proposals, and present credibly to both technical and executive buyers.
• Lead, develop and retain the pod leads and consultants in the service line, setting technical direction, career pathways and certification plans under the 5x5x5 training model.
• Deliver personally on client engagements to the role's utilisation target, retaining hands-on technical credibility with clients and the team.
• Drive AI-enabled support: adopt and govern AI tooling that increases coverage, reduces manual effort and improves output quality, without compromising client confidentiality or testing safety.
• Work with peer Heads to keep consultants fungible across service lines, supporting the pooled resourcing model, cross-skilling and a leveraged delivery mix.
• Key health & safety responsibilities:
  Eliminate or minimise employee exposure to risks by regularly reviewing the health and safety risk register, applying appropriate controls, communicating results of risk assessments, and ensuring health and safety is considered in the planning and execution of all LRQA activities.
• Manage your own, and your team's, compliance with health and safety rules, instructions, systems and legal requirements to ensure employees are suitably trained and adequate resources are available to work safely.
• Monitor and review health and safety performance, observe safety behaviours in the workplace, taking appropriate corrective and preventive action as necessary and suggesting and implementing improvement activities.
• Number of direct reports:
  To be confirmed - pod/team leads within the service line, plus indirect leadership of consultants allocated from the pooled capability of other consultants across Offensive Services.
• Geographic area of impact:
  Global. Delivery regions currently UK&I, Greece, US, Mexico, Kuala Lumpur and APAC, with clients and engagements worldwide.
• Size of budget:
  To be confirmed - service line P&L contribution; budget scale to be confirmed with Finance.

• Head of Offensive…