Lead Consultant - OT Security

Job Description

We are seeking self-motivated and driven security consultants to join our team. The ideal candidate will have at least 10 years of experience in OT/ICS cybersecurity and will provide professional services and advisory to our clients. This role involves assessing security measures, identifying vulnerabilities, and recommending solutions to enhance our clients' security posture focused on ICS/OT security

• Lead and develop a team of consultants to deliver high-quality OT/ICS security engagements, providing coaching, quality assurance, and technical direction.
• Serve as engagement lead and primary escalation point on complex or high-value projects, ensuring deliverables meet quality, timeline, and margin expectations.
• Manage multiple concurrent projects and delivery teams, balancing resourcing, utilisation, and client priorities.
• Conduct and oversee security assessments and audits to identify threats, vulnerabilities, risks, and control gaps in ICS/OT environments.
• Develop security policies, procedures, and standards, as well as incident response plans, procedures, and playbooks.
• Perform cyber threat modelling and develop cyber threat profiles based on relevant threat actor Tactics, Techniques & Procedures (TTPs).
• Design scenarios for cybersecurity Table-Top Exercises (TTX) and facilitate delivery for ICS/OT clients.
• Perform security architecture reviews on ICS/OT systems to identify control gaps and advise on remediation roadmaps.
• Develop and optimise methodologies, frameworks, workpapers, report templates, and tools to improve consistency, quality, and efficiency of service delivery.
• Prepare and review high-quality reports and documentation for clients.
• Stay updated with the latest cybersecurity trends, threats, regulatory developments, and technologies affecting OT/ICS environments.

Business Development

• Own and grow a portfolio of client relationships, acting as a trusted advisor to clients.
• Identify, qualify, and pursue new business opportunities; build and maintain a healthy sales pipeline for ICS/OT security and adjacent GRC services, with accountability for pipeline and revenue targets.
• Lead presales activities end-to-end, including opportunity shaping, solutioning, proposal and bid development, effort estimation, pricing input, and client presentations.
• Drive account expansion by identifying cross-sell and up-sell opportunities within existing engagements and coordinating with account and sales teams.
• Develop go-to-market collateral, service offerings, and thought leadership (e.g. white papers, briefings, conference presentations) to strengthen the practice's market presence.
• Represent the firm at industry events, forums, and client briefings to build brand visibility and generate leads.
• Cultivate partnerships with technology vendors, regulators, and industry bodies relevant to the OT/CII ecosystem.
• Track market developments, competitor activity, and regulatory changes to inform service strategy and identify emerging demand

Qualifications

• Minimum of 10 years in information security, with substantial experience in OT/ICS security, governance, risk management, and audit; experience in other areas of information security will be considered.
• Demonstrated track record in business development, presales, or practice growth — including shaping opportunities, developing winning proposals, and building client relationships that convert to revenue.
• Experience in Singapore-based Government and/or Critical Information Infrastructure (CII) projects will be an added advantage.
• Knowledge of cybersecurity frameworks, industry standards, and regulatory requirements is a must, including:
• IEC62443
• NIST Cyber Security Framework;
• Cybersecurity Code of Practice;
• MITRE ICS ATT&CK Framework
• At least one relevant industry certification such as CISSP, CRISC, CISM, CISA, GICSP or GRID.
• Customer Proven experience leading teams and managing senior client stakeholders.
• Excellent oral and written communication, with strong executive presence and the ability to present credibly to C-suite audiences.

Additional Information

We are driven by our AEIOU beliefs—Adventure, Excellence, Integrity, Ownership, and Unity—and we seek individuals who embody these values in both their professional and personal lives. We are committed to our Impact: Valuing our clients, Growing our people, and Creating our future.

Together, we make the extraordinary happen.

Learn more about us at ncs.co and visit our LinkedIn career site.

Scam Alert

We are aware of fraudulent job offers and impersonations of NCS recruiters. Phishing emails using convincing-looking but fake addresses are also commonly used to trick you into thinking that they come from official NCS sources.

Please note that all official communications from NCS Group will only be sent from verified corporate email addresses. Always check that the sender’s email address ends with the genuine NCS domain, @ncs.com.sg and beware of extra letters, symbols or misspellings. When in doubt, verify the sender’s identity by contacting us at [email protected].