OT Vulnerability Analyst

OT Vulnerability Analyst Walton Park | 53.8k - 64.6k per annum (dependent on skills and qualifications)
Full-time | Hybrid Joint-contribution pension from 6% (12% total) – Enhanced maternity & family leave – Life assurance – Holiday Plus – Virtual GP & Employee Assistance Programme plus retail and leisure discounts & many more. REQ
5914

We are looking for an experienced OT Vulnerability Analyst to ensure that OT vulnerabilities are identified by cyber tools, assessments and audits are assessed, prioritized, and risk managed appropriately and in line with policies. You will also be responsible for providing relevant technical/nontechnical security and providing reports to the vulnerability manager.  We deliver safety, warmth, and comfort to homes and businesses.

Every role, whether in the office or on the front line, plays a key part in this mission. Here’s how you will contribute…
· Provide cyber security assurance activities by ensuring implemented solutions are a replica of agreed and approved architecture definition documents  
· Where required, propose solutions and coordinate delivery of mitigating actions to ensure risk levels are aligned with risk appetite.  
· Work alongside and coordinate our third-party vendors including ‘managed security services provider’ (MSSP), penetration testers, attack path mapping and SOC operators including following up remediation work and reports  
· Work with the technical security and assurance team to help deliver new security tooling.  
· Be a Security touchpoint for Project Business Analysts and Project Management and provide project with security consultations, supporting OT Security projects within the Cyber programme  
· Security Architecture and Design
- Review both high/low level architecture definition documents for compliance against security policies, standards and regulatory requirements pertinent to OT environments  
· Attend relevant Architecture Review Board and Technical Design Authority meetings providing sign-off to designs created to deliver technical solutions into the OT environment  
· Produce in-flight project functional and non-functional security requirements and embed into existing processes.  
· Post-implementation / pre-go live auditing of initial requirements for Security OT projects, checking agreed design proposals matched against delivered solutions.

· Operate collaboratively with the IT/OT Security Leads and the wider Corporate IT team to deliver the required solutions.  
· Configure vulnerabilities management tools to ensure security vulnerabilities are identified across the SGN IT and OT estate.  
· Triage, assess and prioritize identified security vulnerabilities, ensure mitigating controls are identified and implemented where necessary,  
· Track remediation, risks, and exceptions and provide the Security Assurance function with vulnerability metrics and reports which include a view of outstanding vulnerabilities, plans for remediation, applied exceptions and security risks.  
· Support continued service improvements initiatives.  What you will need
· Must have 2 years’ cyber security experience within an OT environment with strong OT / ICS knowledge about products, architectures and workflows.
· Must have proven expertise in three of the following security domain areas, Vulnerability Assessment and Management, Security Risk and Compliance, Security Architecture, Endpoint Protection, Network Security, and Security Engineering
· Good understanding and practical experience of Cyber Security Frameworks and standards such as NCSC security principles, NIST Framework, ISO 27001, ISO
27005, IEC
62443 etc.
· Good understanding of Cyber Assurance Framework and experience with working with Regulators and providing compliance updates…