Principal OT Cyber Security Consultant

Job description

We’ll inspire and empower you to deliver your best work so you can evolve, grow and succeed – today and into tomorrow. We offer an exciting range of opportunities to develop your career within a supportive and diverse team who always strive to do the right thing for our people, clients and communities. People are our greatest asset, and we offer a competitive package to retain and attract the best talent. In addition to the benefits you’d expect, UK employees also receive free single medical cover and digital GP service, family-friendly benefits such as enhanced parental leave pay and free membership of employee assistance and parental programmes, plus reimbursement towards relevant professional development and memberships. We also give back to our communities through our Collectively program which incorporates matched-funding, paid volunteering time and charitable donations. About the Opportunity: Amentum is growing its OT cyber security consulting team in Scotland. We are looking for capable, commercially minded consultants who can take ownership of client work, solve problems pragmatically, and help us build lasting client relationships. The role is initially focused on the Energy sector, with potential opportunities to work across other market verticals including Critical National Infrastructure, National Security, Defence and Nuclear. You will support clients across IT and OT environments, helping them understand cyber risk, improve resilience and deliver secure change. This is a consulting role for people who can get things done. You will work with clients, delivery teams and senior stakeholders to define what needs to happen, produce high-quality outputs, and move work forward with minimal day-to-day support. You will combine technical credibility with strong client handling, clear communication and a focus on delivery. You will also contribute to business development by identifying opportunities, shaping proposals and helping grow our client accounts. Ability to obtain SC clearance (if not currently held) is essential for this role. Key Responsibilities: Lead and deliver OT cyber security assignments, taking ownership of scope, outputs, timelines and client expectations. Build trusted relationships with clients and stakeholders, acting as a credible advisor on OT cyber security and resilience. Assess cyber risks across OT and connected IT environments and turn findings into clear, practical recommendations. Develop security requirements, architectures and approaches for complex OT systems and programmes. Support security reviews, risk assessments and assurance activities using relevant frameworks such as NCSC CAF, IEC 62443, ISO 27001 and NIST CSF. Support accreditation, regulatory and compliance activities where required. Produce clear, client-ready deliverables, including assessments, reports, roadmaps, requirements and proposals. Contribute to account growth, bids and new business opportunities through technical input, client insight and relationship building. Work collaboratively across Amentum teams while being comfortable operating independently. Here’s What You’ll Need: We are interested in consultants who are proactive, dependable and comfortable in client-facing roles. You do not need to tick every box, but you should be able to demonstrate: Experience delivering cyber security consulting, security engineering, assurance or risk work, ideally with a significant focus on OT, industrial control systems or critical infrastructure. Strong understanding of OT environments, operational safety, resilience and availability considerations. Practical knowledge of cyber risk and threat assessment approaches. Familiarity with relevant standards and frameworks, such as IEC 62443, NCSC CAF, ISO 27001, NIST CSF and the NIS Regulations. Awareness of common OT and IT security technologies, networks, architectures and protocols. The ability to work with limited supervision, make sensible decisions, and keep clients and internal teams informed. Strong written and verbal communication, with the ability to explain technical issues in a clear, commercial and practical way. A willingness to travel to client sites when required. Desirable: Experience in the Energy sector or wider Critical National Infrastructure. Understanding of Ofgem cyber resilience plans and price control submissions. Familiarity with IEC 62351, IEC 61850 or IEC 60870-5-104. Relevant certifications such as CISSP, GICSP or similar. Our Culture: Our values stand on a foundation of safety, integrity, inclusion, and diversity. We put people at the heart of our business, and we genuinely believe that we all succeed by supporting one another through our culture of caring. We value positive mental health and a sense of belonging for all employees. We aim to embed inclusion and diversity in everything we do. We know that if we are inclusive, we are more connected, and if we are diverse, we’re more creative. We accept people for who they are, regardless of age, disability, gender identity, gender expression, marital status, mental health, race, faith or belief, sexual orientation, socioeconomic background, and whether you’re pregnant or on family leave. This is reflected in our wide range of Global Employee Networks centred on inclusion and diversity. We partner with VERCIDA to help us attract and retain diverse talent. For greater online accessibility, please visit Promoting Equality & Diversity in Jobs and Career - VERCIDA to view and access our roles. As a Disability Confident employer, we will interview all disabled applicants who meet the minimum criteria for a vacancy. We welcome applications from candidates who are seeking flexible working and from those who may not meet all the listed requirements for a role. Your application experience is important to us and we’re keen to adapt to make every interaction even better. We welcome feedback on our recruitment process and if you need more from us before deciding to join us then please let us know.