[Hiring] Principal Cyber Strategic Consultant @NCC Group

Role Description

As a Principal OT consultant in NCC Group's Global OT Consulting and Implementation (C&I) division, your role is pivotal in providing Cyber Security Assurance and Engineering to businesses, aiding them in safeguarding critical systems and information assets.

• Build and maintain trusted client relationships.
• Manage teams and conduct assessments.
• Translate technical findings into actionable roadmaps.
• Ensure adherence to internal policies and procedures.
• Support sales activities and mentor junior consultants.
• Work with the Global OT Director to expand global engineering capabilities.
• Support the development of the C&I capability globally, which may include travel.

Qualifications

• Ability to assess and develop cyber security engineering solutions for industrial control systems (ICS), SCADA, and other OT environments.
• Provide expert consulting services in IT & OT and convergence challenges and solutions, ideally with a focus in the Rail sector.
• Perform risk assessments and gap analyses against relevant industry standards and frameworks (NIST, IEC 62443, etc.).
• Lead workshops with suppliers and operators for 62443 Initial Risk Assessments and Detailed Risk Assessment processes.
• Design and implement security controls specific to industrial environments.
• Manage teams and projects that create and deliver technical reports and executive presentations for clients.
• Understanding of emerging threats, vulnerabilities, and security solutions specific to OT environments and protocols.
• Support international teams remotely and travel to client sites as necessary.
• Excellent communication, consulting, and presentation skills.
• A recognised OT qualification such as GIAC GICSP, 62443, or similar.
• Experience delivering OT projects within critical national infrastructure, ideally in the transport subsector.
• Ability to combine MITRE Threat Modelling, OT & Enterprise, aligned to IEC/ISA 62443.
• Experience with TS 50701 (IEC63452) standard.
• Practical experience as controls systems engineer or industrial engineering with SCADA or DCS or EMS.

Requirements

• Certifications like CISM, CISSP, CRISC, ISO 27001 LI/LA, CISA are advantageous.
• A degree in a science-related topic (Mathematics, Computer Science, Engineering, Physics) or relevant significant work experience.
• Proficiency in managing people and building teams.
• Willingness and capability to prioritize safety in hazardous or "operating environments".

Benefits

• Superannuation.
• Annual leave – 20 days.
• Sick Leave & Caregivers Leave – 10 days.
• Marriage/Civil Partnership Leave – 1 day.
• Moving Home Leave – 1 day.
• Employee Assistance Program with access to confidential counselling support 24/7 for up to 6 occasions per calendar year.

Company Description

At NCC Group, our mission is to create a more secure digital future. Our teams partner with clients across various industries, securing new products and emerging technologies, as well as solving complex security problems. We are committed to providing an inclusive and supportive work environment that fosters creativity, collaboration, authenticity, and accountability.