Role: OT Cyber Security Analyst
Location: Culham - 2 days per week on site (hybrid)
Contract length: Until 18/12/2026
Day rate: Approx. £50/hour (Umbrella) or £36.43/hour (PAYE)
IR35: In scope
This role sits at the heart of operational technology security within critical infrastructure, giving you the chance to shape and mature OT security controls and governance in a highly visible environment.
What you will be doing
- Implement, operate, and continuously improve OT security controls and monitoring capabilities across complex OT environments.
- Apply and embed an OT Security Strategy, policies, and standards across industrial control and critical infrastructure systems.
- Align OT security with leading frameworks such as IEC 62443, NIST CSF, CAF and ISO 27001.
- Carry out OT security risk assessments, gap analyses and remediation planning.
- Work closely with operations, engineering teams and MSPs to ensure security controls are implemented and sustained.
- Contribute to governance artefacts - policies, standards and documentation that underpin OT security.
- Support integration with SIEM/SOC functions for OT environments.
What our client is looking for
- Strong OT security experience within ICS or critical infrastructure - ideally from oil & gas, rail, chemical, or similar process industries.
- Hands-on experience implementing OT security strategies, policies and standards.
- Solid understanding of OT networks, segmentation and common industrial protocols.
- Familiarity with SIEM/SOC integration for OT environments.
- Experience working with operations/engineering teams and advising MSPs or third-party security providers.
- Excellent communication and documentation skills, especially around policies and standards.
- Maximum notice period of 2 weeks.
Desirable
- Experience with OT asset discovery, monitoring and OT security tools.
- Exposure to regulatory requirements for critical infrastructure (e.g. NIS Directive, UK CAF).
- Understanding of project / service delivery lifecycles and ITSM controls.
Security clearance
- Active SC clearance or SC that has lapsed within the last 12 months is required (no flexibility on this).
This is a strong opportunity for someone who wants to work at the intersection of OT, cyber security and critical national infrastructure, with the stability of a contract running to the end of 2026.