OT Cyber Security Analyst

Role: OT Cyber Security Analyst

Location: Culham - 2 days per week on site (hybrid)

Contract length: Until 18/12/2026

Day rate: Approx. £50/hour (Umbrella) or £36.43/hour (PAYE)

IR35: In scope

This role sits at the heart of operational technology security within critical infrastructure, giving you the chance to shape and mature OT security controls and governance in a highly visible environment.

What you will be doing

Implement, operate, and continuously improve OT security controls and monitoring capabilities across complex OT environments.
Apply and embed an OT Security Strategy, policies, and standards across industrial control and critical infrastructure systems.
Align OT security with leading frameworks such as IEC 62443, NIST CSF, CAF and ISO 27001.
Carry out OT security risk assessments, gap analyses and remediation planning.
Work closely with operations, engineering teams and MSPs to ensure security controls are implemented and sustained.
Contribute to governance artefacts - policies, standards and documentation that underpin OT security.
Support integration with SIEM/SOC functions for OT environments.

What our client is looking for

Strong OT security experience within ICS or critical infrastructure - ideally from oil & gas, rail, chemical, or similar process industries.
Hands-on experience implementing OT security strategies, policies and standards.
Solid understanding of OT networks, segmentation and common industrial protocols.
Familiarity with SIEM/SOC integration for OT environments.
Experience working with operations/engineering teams and advising MSPs or third-party security providers.
Excellent communication and documentation skills, especially around policies and standards.
Maximum notice period of 2 weeks.

Desirable

Experience with OT asset discovery, monitoring and OT security tools.
Exposure to regulatory requirements for critical infrastructure (e.g. NIS Directive, UK CAF).
Understanding of project / service delivery lifecycles and ITSM controls.

Security clearance

Active SC clearance or SC that has lapsed within the last 12 months is required (no flexibility on this).

This is a strong opportunity for someone who wants to work at the intersection of OT, cyber security and critical national infrastructure, with the stability of a contract running to the end of 2026