OT Security Architect – Global Cybersecurity Advisory

About the role

As a Principal OT Security Architect in a Global Cybersecurity Advisory practice, you will act as the strategic and technical anchor for large‑scale, multi‑country Industrial Control Systems (ICS) and Operational Technology (OT) security transformations. You will guide cross‑border teams to design, validate, and implement resilient OT security architectures for leading Oil & Gas and Utilities enterprises.

Key responsibilities

• Design and harmonise enterprise‑wide OT security frameworks across multiple regions, aligning global blueprints with local operational realities.
• Map and ensure compliance with international regulations such as NIST SP 800‑82, NIS 2, NERC CIP, and regional directives.
• Lead multi‑site risk assessments, threat modelling, and maturity evaluations to produce multi‑year security roadmaps for C‑suite and board audiences.
• Architect secure‑by‑design solutions using the Purdue Model, covering Level 0 to Level 5, with robust segmentation and iDMZs.
• Integrate legacy SCADA, DCS, PLC, and SIS environments with modern IIoT, cloud analytics, and edge computing platforms.
• Design and oversee deployment of OT‑specific monitoring, continuous threat detection, and asset discovery tools, integrating them with centralized or federated SOCs.
• Lead distributed engineering and advisory teams, ensuring on‑time, high‑quality delivery.
• Represent the firm at global industry forums and contribute to white papers and internal methodology acceleration.

Required profile

• 7+ years dedicated OT/ICS security experience.
• Deep domain expertise in Oil & Gas (refineries, pipelines, offshore) or Utilities (power generation, transmission, water treatment).
• Proven ability to advise senior executives and board members on security strategy.

Required skills

• SCADA
• DCS
• PLC
• SIS
• Industrial IoT (IIoT)
• Cloud analytics
• Edge computing
• Continuous threat detection
• Asset discovery tools
• Security Operations Center (SOC) integration