senior operational technology - security consultant (m/f/x).

Perform OT cybersecurity maturity and risk assessments aligned with recognized industry standards;
Assess industrial control systems (ICS), SCADA, DCS, PLC, and IIoT environments;
Develop strategic OT cybersecurity roadmaps and remediation plans;
Support clients in achieving compliance with regulatory frameworks and standards such as NIS2 and IEC 62443;
Review and assess OT network architectures, focusing on segmentation and secure remote access;
Conduct OT vulnerability assessments, technical reviews, and security architecture audits;
Support the deployment, configuration, and optimization of OT security monitoring and asset visibility platforms;
Work closely with engineering, operations, maintenance, and IT teams to implement pragmatic security improvements with minimal operational disruption;
Contribute to incident response planning and cyber resilience initiatives for industrial environments;
Produce executive-level reports, detailed technical documentation, and client presentations.

Proven background in industrial operational environments (e.g., Oil & Gas / Refineries, Power Generation, Transmission & Distribution / Substations, Manufacturing, Water Utilities, Chemicals, or Mining);
Strong grasp of industrial cybersecurity concepts, including the Purdue Enterprise Reference Architecture (PERA / Purdue Model), Distributed Control Systems (DCS), and Safety Instrumented Systems (SIS);
Working knowledge of key standards and frameworks: IEC 62443, NIST CSF, NIST SP 800-82, C2M2, CIS Controls (OT context), and MITRE ATT&CK for ICS;
Solid understanding of industrial networking concepts and protocols (Modbus TCP/IP & RTU, DNP3, OPC Classic / OPC-UA);
Hands-on experience with OT visibility and security platforms (e.g., Nozomi Networks, Claroty, Dragos, Armis, TXOne Networks, or Industrial Defender).
Preferred Qualifications:

Degree in Cybersecurity, Computer Science, Electrical Engineering, Industrial Automation, Telecommunications, or a related field;
Relevant industry certifications (GICSP, GRID, ISA/IEC 62443 Cybersecurity Expert, CISSP, CISM, Security+, CCNA/CCNP);
Experience supporting digital transformation, Industry 4.0, or cloud-connected industrial environments;
Knowledge of Zero Trust architecture applied to OT;
Familiarity with functional safety standards (IEC 61511 / IEC 61508);
Full professional proficiency in English (spoken and written).