B

Bridewell

CNI-focused cyber security consulting

Principal OT Security Consultant

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeLondon, UKNo salary listed

About the Job

Requirements

  • Deep knowledge of operational technology cybersecurity controls, architectures, and best practices.
  • Skill in industrial control system and supervisory control and data acquisition protocol analysis, including Modbus, DNP3, Profinet, OPC-UA, and CIP.
  • Experience with operational technology-relevant frameworks such as IEC 62443 and NCSC Cyber Assessment Framework, including assessment and program delivery.
  • Strong understanding of operational technology system design, industrial networks, programmable logic controllers, human-machine interfaces, safety systems, and security tooling for operational technology environments, including asset discovery, anomaly detection, and threat analytics.
  • Experience presenting to senior executives, regulators, and technical teams, and ability to translate complex technical concepts into clear business language.
  • Stakeholder-management skills across engineering, operations, cybersecurity, and executive leadership, including working at all organizational levels.
  • Ability to develop services and solutions that drive revenue growth and serve as an escalation point on complex matters requiring expertise and stakeholder management.
  • Ability to produce costed sales proposals and scope engagements accurately while balancing effort, risk, and cost.
  • Track record of helping grow accounts or developing long-term client relationships.
  • Proven experience leading large teams of consultants or engineers in complex project environments, and ability to create, inspire, coach, and develop high-performing teams.
  • Degree in Engineering, Cyber Security, Computer Science, or a related field.
  • Strategic thinking, analytical and problem-solving skills, organization, ability to handle multiple complex projects, resilience, and ability to drive change across technical and operational teams.
  • Must hold Security Check clearance or be eligible and willing to undergo security clearance.

Responsibilities

  • Perform operational technology risk assessments, threat modelling, and vulnerability assessments.
  • Assess or assure compliance with the NIS Regulations, NCSC Cyber Assessment Framework, NIST Cybersecurity Framework, IEC 62443, ISO 27001, and sector-specific guidance.
  • Develop security measures and designs to deliver security improvements.
  • Provide expert guidance on operational technology cybersecurity challenges, including secure integration of information technology and operational technology systems, cloud-connected operational technology, remote access, legacy-system protection, and emerging technologies.
  • Develop and review system-hardening standards, network-segmentation designs, asset-management solutions, and security-monitoring approaches for operational technology environments.
  • Develop, performance-manage, and continually improve the team and associated service area.
  • Lead operational technology cybersecurity engagements, ensuring adequate resourcing, delivery on time and to budget, and compliance with contractual requirements.
  • Act as the senior client contact, managing expectations, risks, issues, and program governance.
  • Produce written deliverables, including strategies, assessments, architectures, and board-level briefings.
  • Facilitate client workshops, executive presentations, technical reviews, and stakeholder engagement across engineering, operations, and cybersecurity teams.
  • Support pre-sales engagements through scoping, estimating, proposal writing, and client presentations, including input and decision-making.
  • Support business development by identifying opportunities, nurturing client relationships, and producing sales proposals.
  • Provide subject-matter expertise in sales meetings, bids, tenders, and industry events.
  • Support the Associate Director and Chief Operating Officer in shaping strategy, services, client initiatives, and internal company matters as required.
  • Act as an advocate for company values and foster a high-performance, inclusive culture that values innovation, collaboration, and continuous improvement.
  • Provide leadership and line management for a team of consultants, including mentoring, coaching, performance management, and career-development support.
  • Support the development of other company capabilities in operational technology security architecture, governance, risk and compliance, threat intelligence, and incident response.
  • Oversee training pathways, succession planning, and technical competency development for consultants ranging from Senior Lead to Consultant level.
  • Help shape operational technology cybersecurity service offerings, methodologies, templates, and delivery frameworks.
  • Contribute to industry thought leadership through white papers, webinars, conference presentations, and sector insights.
  • Track and interpret operational technology threat landscapes, regulatory developments, and technology trends.
  • Collaborate across technical, commercial, and managed-services teams to strengthen integrated service propositions.
  • Travel to different sites occasionally.

Desired Qualifications

  • Global Industrial Cyber Security Professional, Global Resilience and Industrial Defense, Certified Information Systems Security Professional, Certified Information Security Manager, or ISA/IEC 62443 certifications.
  • PRINCE2, Agile, or similar delivery qualifications.

About the Company

Bridewell

CNI-focused cyber security consulting

Bridewell provides cyber security services to organisations in Critical National Infrastructure and other highly regulated sectors. It offers cyber consulting and managed security services, with a focus on implementing practical security controls and monitoring to protect operations. As a long-standing Microsoft partner, Bridewell specializes in maximizing the effectiveness of Microsoft Security technology—such as Defender and Cloud security tools—to deliver targeted, policy-driven security solutions. The company differentiates itself through deep knowledge of CNI challenges, accredited industry credentials, and a collaborative approach that keeps clients in partnership to choose, deploy, and operate the right security measures. The goal is to help clients defend against threats and continue operating safely and securely by continually improving their security posture.

Company size
201-500
Company stage
Not listed
Total funding
Not listed
Headquarters
Reading, United Kingdom
Founded
2013

Recently Posted Jobs

Explore more opportunities at Bridewell

See more jobs