Director, OT​/IoT Security Services- Remote; U.S

Remote

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

The systems our OT clients run treat drinking water, move natural gas, run production lines, and keep hospital equipment working. Many were installed before anyone thought about attackers, and plenty still run software the vendor stopped supporting years ago. You can't take a refinery controller offline on a Tuesday afternoon to patch it, and you can't reboot a substation to check whether a fix worked.

This work needs people who understand the physical process as well as the network, and we've built a team of them. When we do it well, nobody outside the plant ever hears about it. GuidePoint Security is hiring a Director, OT/IoT Security Services to lead that team.

You'll report to the SVP of Offensive Security and own the practice: the team, the service catalog, delivery quality, and the P&L. The delivery managers already run day-to-day projects well, so expect to spend most of your time with engineers and clients, and to be the senior escalation point when a technical or client issue gets complicated. The rest goes to supporting regional sales teams, other GuidePoint Security practices, and technology partners.

In this practice, "Wow Them" means an account executive gets a scope and price back quickly, our engineers work safely on a running plant floor, and the client calls us for their next site.

The OT/IoT Security Services practice protects the industrial systems our clients depend on in energy, water, manufacturing, healthcare, transportation, and other critical infrastructure sectors. We deliver in every GuidePoint Security region and provide the services behind GuidePoint Security's OT technology partnerships.

Most of the team came to security from the plant floor or the military: veterans and former engineers from utilities, oil and gas, manufacturing, and nuclear power. They know what an operator is thinking when a consultant walks into the control room with a laptop, and safety and uptime come first on every job.

A typical client relationship starts with finding out what's actually on the OT network and where it's exposed. From there we design segmentation and controls that don't interrupt operations, and many clients stay with us for ongoing OT vulnerability management. The work in between includes OT risk assessments against ISA/IEC 62443, NIST SP 800-82, NERC CIP, and the TSA security directives;

OT penetration tests scoped for live environments; and deployment and tuning of OT visibility and secure remote access platforms.

OT has problems you won't find in IT security, like hunting for an attacker on a network that can't handle an active scan, or explaining a firewall change to someone who has to keep a turbine running. Every site is different, and that's a big part of why we stay.

• A multi-vendor OT lab with PLC hardware and several visibility and remote access platforms, so clients can compare them side by side before buying
• Vendor-objective advice. We work with many platforms and can tell a client which one fits their environment
• A fast-growing OT practice on track to become one of GuidePoint Security's top practices, with leadership support and the autonomy to shape the service catalog, lab, and team

• Lead and grow the OT team of managers, engineers, and operations staff while fostering an environment that supports long-term retention. Meet regularly one-on-one with your managers, spend time with the engineers, and stay close enough to active engagements that problems come up early instead of pt the team structure as the practice scales, guided by input from those performing the work.
• Build a mentorship program that pairs experienced OT engineers with those who are new to OT or to client-facing services delivery, and define clear career and certification paths. Give engineers supported time in client conversations before asking them to lead one.
• Standardize how the practice runs:…