Cyber Security Analyst (SC Cleared)

OT Cyber Security Analyst

Contract Length: Until 18/12/2026
Location: Culham, 2 days/week on site

Security Clearance: Active SC or lapsed within the last 12 months

Essential:

Oil/gas/rail/chemical process industry
Familiarity with SIEM/SOC integration for OT environments
Demonstrable experience in maturing OT security within ICS or critical infrastructure environments.
Proven ability implement OT security strategies, policies, and standards.
Strong knowledge of OT security frameworks and standards (IEC 62443, NIST CSF, CAF, ISO 27001).
Experience conducting OT security risk assessments, gap analysis, and remediation planning.
Knowledge of OT networks, segmentation, and common industrial protocols.
Experience working with operations and engineering teams in OT environments.
Ability to provide technical recommendations for MSPs or third-party security service providers.
Strong communication and documentation skills, particularly in policy/standards creation.
Max notice period of 2 weeks

Minimum Requirement:

The OT Cyber Security Analyst is responsible for the implementation, operation, and continuous improvement of OT security controls and monitoring capabilities across client environments. The role delivers hands-on security engineering and operational support, ensuring OT systems are protected in line with defined strategy, standards, and risk priorities. This includes implementing an OT Security Strategy, contributing to the development of policies and standards, and apply appropriate security controls across OT environments.

You will provide technical and governance compliance of OT security, ensuring alignment with industry frameworks (IEC 62443, NIST CSF, CAF, ISO 27001) and with enterprise cyber security objectives.

The role will combine hands-on implementation and the creation of governance artefacts. You will also engage with engineering teams and managed service providers (MSPs) to ensure that OT security controls are effectively implemented and sustained. Experience with SIEM/SOC integration is valuable and considered desirable.

Desirable:
Experience with OT asset discovery, monitoring, and security tool deployment.
Exposure to regulatory compliance in critical infrastructure (eg, NIS Directive, UK CAF).
Knowledge of project and service delivery life cycles and ITSM controls.

Oil/gas/rail/chemical process industry
Familiarity with SIEM/SOC integration for OT environments
Demonstrable experience in maturing OT security within ICS or critical infrastructure environments.
Proven ability implement OT security strategies, policies, and standards.
Strong knowledge of OT security frameworks and standards (IEC 62443, NIST CSF, CAF, ISO 27001).
Experience conducting OT security risk assessments, gap analysis, and remediation planning.
Knowledge of OT networks, segmentation, and common industrial protocols.
Experience working with operations and engineering teams in OT environments.
Ability to provide technical recommendations for MSPs or third-party security service providers.
Strong communication and documentation skills, particularly in policy/standards creation.
Max notice period of 2 weeks

Minimum Requirement:

The OT Cyber Security Analyst is responsible for the implementation, operation, and continuous improvement of OT security controls and monitoring capabilities across client environments. The role delivers hands-on security engineering and operational support, ensuring OT systems are protected in line with defined strategy, standards, and risk priorities. This includes implementing an OT Security Strategy, contributing to the development of policies and standards, and apply appropriate security controls across OT environments.

You will provide technical and governance compliance of OT security, ensuring alignment with industry frameworks (IEC 62443, NIST CSF, CAF, ISO 27001) and with enterprise cyber security objectives.

The role will combine hands-on implementation and the creation of governance artefacts. You will also engage with engineering teams and managed service providers (MSPs) to ensure that OT security controls are effectively implemented and sustained. Experience with SIEM/SOC integration is valuable and considered desirable.

Desirable:
Experience with OT asset discovery, monitoring, and security tool deployment.
Exposure to regulatory compliance in critical infrastructure (eg, NIS Directive, UK CAF).
Knowledge of project and service delivery life cycles and ITSM controls.