OT Cyber Security Analyst

Role: OT Cyber Security Analyst

Location: Culham - 2 days per week on site (hybrid)

Contract length: Until 18/12/2026

Day rate: Approx. £50/hour (Umbrella) or £36.43/hour (PAYE)

IR35: In scope

This role sits at the heart of operational technology security within critical infrastructure, giving you the chance to shape and mature OT security controls and governance in a highly visible environment.

What you will be doing

• Implement, operate, and continuously improve OT security controls and monitoring capabilities across complex OT environments.
• Apply and embed an OT Security Strategy, policies, and standards across industrial control and critical infrastructure systems.
• Align OT security with leading frameworks such as IEC 62443, NIST CSF, CAF and ISO 27001.
• Carry out OT security risk assessments, gap analyses and remediation planning.
• Work closely with operations, engineering teams and MSPs to ensure security controls are implemented and sustained.
• Contribute to governance artefacts - policies, standards and documentation that underpin OT security.
• Support integration with SIEM/SOC functions for OT environments.

What our client is looking for

• Strong OT security experience within ICS or critical infrastructure - ideally from oil & gas, rail, chemical, or similar process industries.
• Hands-on experience implementing OT security strategies, policies and standards.
• Solid understanding of OT networks, segmentation and common industrial protocols.
• Familiarity with SIEM/SOC integration for OT environments.
• Experience working with operations/engineering teams and advising MSPs or third-party security providers.
• Excellent communication and documentation skills, especially around policies and standards.
• Maximum notice period of 2 weeks.

Desirable

• Experience with OT asset discovery, monitoring and OT security tools.
• Exposure to regulatory requirements for critical infrastructure (e.g. NIS Directive, UK CAF).
• Understanding of project / service delivery lifecycles and ITSM controls.

Security clearance

• Active SC clearance or SC that has lapsed within the last 12 months is required (no flexibility on this).

This is a strong opportunity for someone who wants to work at the intersection of OT, cyber security and critical national infrastructure, with the stability of a contract running to the end of 2026.