OT Vulnerability Management & Resilience Lead

Key Responsibilities

• Own the OT vulnerability and exposure management methodology, prioritisation model and remediation governance.
• Coordinate safe assessment and mitigation of vulnerabilities across industrial assets and supporting infrastructure.
• Develop OT incident response plans, playbooks, escalation paths and decision frameworks.
• Lead or coordinate OT forensic investigations, threat hunting and technical lessons learned.
• Integrate OT response with the existing CDC/SOC, crisis management, Legal and business continuity processes.
• Define resilience expectations for backup, configuration recovery, restoration testing and critical dependencies.
• Provide clusters and plants with risk-based mitigation options where immediate patching is not operationally feasible.

Qualifications

• Bachelor's degree in cyber security, engineering, digital forensics, computer science or a related discipline, equivalent senior experience accepted.
• Strong understanding of OT vulnerability risk, industrial operations, incident command and recovery constraints.
• Knowledge of forensic integrity, evidence handling, threat hunting and compensating control design.

Experience

• 5+ years in vulnerability management, incident response, digital forensics or resilience, including 4+ years in OT/ICS.
• Experience leading high-severity cyber incidents and coordinating technical, operational and executive stakeholders.
• Experience designing exposure prioritisation and remediation programmes for distributed environments.

Certifications

• GCIH, GCFA, GCFE, GRID or GICSP preferred.
• CISSP, IEC 62443, CRISC or relevant incident command/resilience certification desirable.