Principal Information Security Consultant; OT

We’re problem solvers etimes the answer is technology, sometimes it is strategy, and sometimes it is a strong cup of tea and a bit of thoughtful conversation. Whatever it takes, we work it out with our clients.

We’re an IT consultancy that helps organisations get the best out of their technology. That means keeping them secure and keeping the bad guys out, making sure everything works and is easy to use, and doing smart things with data and software to give their business an edge. It is important work, and we care about doing it well and for the right reasons.

Life at Waterstons is friendly, flexible and built on trust. We hire people who are curious, thoughtful and good at getting to the heart of a problem. You get support, trust and room to grow in a place that still feels human. The unlimited holidays and private healthcare are a nice touch, although most people stay because it feels like the right place to do good work with good people.

As a Principal Information Security Consultant specialising in operational technology, you will lead complex OT cyber security engagements for energy-sector clients. You will provide strategic and technical direction, deliver high-quality consultancy, develop client relationships and help build Waterstons’ OT security capability.

You’ll have an advanced understanding of, and over 8 years experience working with, organisations that have OT networks and standards used in the energy sector, such as the Cyber Assessment Framework and IEC ISA 99/62443.

You’ll be helping multiple clients with different aspects of their security. The role is interesting and varied and a great opportunity for those that prefer spontaneity over routine.

You’ll be the recognised subject matter expert, providing strategic direction and technical leadership across complex client engagements.

The successful candidate will ideally be based within the Glasgow region or be willing and able to travel to client sites in and around Glasgow for a minimum of two to three days per week, as required by the client.

• Act as the OT cyber security subject matter expert, providing strategic direction and technical leadership across complex client engagements.

• Delivering projects, including creating information security strategies, risk assessments of OT projects and assessments against frameworks like ISO 27001.

• Identify and develop new business opportunities with clients and prospects.

• Mentoring and supporting junior team members to raise the team's understanding of working with Energy clients.

• Stay updated on the latest information security best practices to provide clients with the best advice.

If some (or most) of the following sound like you, we’d love to hear from you:

• A minimum of eight years’ experience delivering OT cyber security consultancy, including at least three years’ experience within the energy sector or directly supporting energy-sector organisations.

• Demonstrable experience developing and implementing security risk methodologies, conducting comprehensive OT security risk assessments, identifying threats and vulnerabilities, defining proportionate mitigation strategies, and planning, leading and delivering security audit and assurance programmes.

• OT cyber security subject matter expert, providing strategic direction and technical leadership for complex client engagements and supporting the development of Waterstons' OT security capability.

• Demonstrable experience of OT security architecture, industrial control systems and automation, OT reference architecture design, network segmentation, secure-by-design principles and the application of OT cyber security good practice.

• In-depth knowledge and practical…