Head of OT & ICS Security Testing

Reference: 424mfjkvlgbqetwqprnd

We are seeking an experienced Head of OT & ICS Security Testing to lead the strategy, governance and delivery of security testing across operational technology (OT), industrial control systems (ICS) and critical infrastructure environments. This senior role will provide technical leadership for penetration testing, vulnerability assessments, red team exercises, threat-led testing and security validation activities across complex, safety-sensitive environments. You will establish a robust testing framework that reflects relevant industry standards, regulatory expectations and the unique operational requirements of industrial systems.

You will define and maintain the OT and ICS security testing roadmap, prioritising activity according to business risk, threat intelligence, system criticality and operational constraints. Responsibilities will include leading internal and external testing teams, overseeing testing scopes and methodologies, reviewing findings, and ensuring that remediation plans are practical, risk-based and properly tracked. You will work closely with engineering, operations, architecture, cyber defence, risk and compliance stakeholders, while engaging with system owners and third-party suppliers to coordinate testing without disrupting essential services. The role will also involve developing reporting for senior leadership, contributing to incident readiness and validating the effectiveness of security controls through realistic exercises.

The successful candidate will have substantial experience leading security testing within OT, ICS, industrial automation, manufacturing, energy, utilities, transport or similarly complex environments. You will have strong knowledge of protocols, technologies and architectures such as SCADA, DCS, PLCs, RTUs, historians, engineering workstations and industrial networks, together with a clear understanding of the differences between IT and OT risk. Experience with recognised frameworks and standards, such as IEC 62443, NIST SP 800-82, MITRE ATT&CK for ICS and relevant regulatory requirements, is highly desirable. Professional certifications in penetration testing, industrial cybersecurity or information security are beneficial. You will be an influential communicator, confident working with technical and non-technical stakeholders, and capable of balancing rigorous security assurance with safety, availability and operational continuity.

COMPETITIVE SALARY
Added 05/10/2026
Reference: 424mfjkvlgbqetwqprnd

Other similar jobs

Head of Offensive AI Security & Technical Excellence

Added 15/09/2026

We are seeking a visionary Head of Offensive AI Security & Technical Excellence to lead the development of advanced security capabilities across artificial intelligence, machine learning, and emerging technologies. This senior role will define and execute an offensive security strategy focused on identifying, validating, and reducing risks in AI-enabled products, platforms, models, and supporting infrastructure. You will build and lead a high-performing team of security researchers, red teamers, penetration testers, and technical specialists, fostering a culture of curiosity, responsible challenge, and continuous improvement. Your responsibilities will include establishing programmes for AI red teaming, adversarial testing, threat modelling, vulnerability research, model...

Learn more

24 x 7 Security Analyst

Added 02/10/2026

We are seeking a vigilant and analytical 24 x 7 Security Analyst to support continuous monitoring and protection of critical systems, networks, applications, and data. Working as part of a round-the-clock security operations function, you will identify, investigate, and respond to potential security incidents while helping maintain a strong and resilient cyber defence environment. This role requires sound judgement, attention to detail, and the ability to remain calm and methodical when handling urgent or complex events. Key responsibilities include monitoring security alerts from SIEM, endpoint, network, identity, and other security tools; triaging and investigating suspicious activity; validating indicators of compromise;...

Learn more

Cyber Security Advisory Lead - ICS/SCADA/OT

Added 12/10/2026

We are seeking an experienced Cyber Security Advisory Lead specialising in Industrial Control Systems (ICS), Supervisory Control and Data Acquisition (SCADA), and Operational Technology (OT). This role will provide strategic and practical security advice to organisations operating critical infrastructure, industrial environments, and connected operational networks. You will lead advisory engagements, assess cyber risk across OT environments, and develop effective, risk-based security strategies that balance operational resilience, safety, availability, and regulatory obligations. Key responsibilities will include leading OT and ICS security assessments, maturity reviews, threat and risk assessments, architecture reviews, and gap analyses. You will advise clients on secure network design,...

Learn more

Cyber Security Penetration Testing Consultant

Added 13/10/2026

We are seeking a Cyber Security Penetration Testing Consultant to assess, challenge and improve the security of systems, applications, networks and cloud environments. You will plan and deliver penetration tests, vulnerability assessments and red-team style engagements, identifying weaknesses that could be exploited by malicious actors and providing clear, practical recommendations to reduce risk. The role involves working across varied client environments and translating complex technical findings into concise reports suitable for both technical and non-technical stakeholders. Your responsibilities will include scoping and executing web application, mobile application, infrastructure, wireless, API and cloud penetration tests; conducting reconnaissance, threat modelling and manual...

Learn more

Cyber Security Penetration Testing Consultant

Added 13/10/2026

We are seeking a Cyber Security Penetration Testing Consultant to assess, challenge and improve the security of applications, infrastructure, networks and cloud environments. You will plan and deliver penetration tests across a range of technologies, identifying vulnerabilities that could affect confidentiality, integrity or availability. The role requires a methodical, curious and risk-aware professional who can translate technical findings into clear, practical recommendations for both technical and non-technical stakeholders. Your responsibilities will include defining testing scopes and rules of engagement, conducting reconnaissance and vulnerability assessments, and performing manual and automated testing of web applications, APIs, mobile applications, internal and external networks,...

Learn more

Penetration Testing Consultant (Cyber Security)

Added 30/09/2026

We are seeking a Penetration Testing Consultant (Cyber Security) to assess the security of applications, infrastructure, networks and cloud environments. You will plan and deliver penetration tests, vulnerability assessments and security reviews, identifying weaknesses before they can be exploited. The role involves conducting tests across web applications, APIs, mobile platforms, internal and external networks, wireless environments and cloud services, using a combination of industry-standard tools and manual testing techniques. You will be expected to assess business risk, validate findings and provide practical recommendations that support effective remediation. Key responsibilities include defining test scopes and methodologies, gathering intelligence, performing controlled exploitation,...

Learn more

Offensive Security & Advanced Testing

Added 29/09/2026

We are seeking an experienced Offensive Security & Advanced Testing professional to identify, assess and help address security weaknesses across applications, infrastructure, networks, cloud environments and emerging technologies. You will plan and deliver authorised penetration tests, red-team engagements, adversary simulations and security assessments, using both established methodologies and creative attack techniques. The role will involve translating technical findings into clear business risks, prioritising remediation and working closely with engineering, architecture, risk and operations teams to strengthen overall security resilience. Responsibilities will include scoping and executing web, mobile, API, network, wireless, cloud and embedded-device assessments; developing bespoke tooling, scripts and proof-of-concept...

Learn more

Cyber Security Consultant (Penetration Testing)

Added 23/09/2026

We are seeking a Cyber Security Consultant (Penetration Testing) to assess, challenge and improve the security of applications, infrastructure, networks and cloud environments. In this role, you will plan and deliver penetration tests and vulnerability assessments across a range of technologies, identifying weaknesses that could be exploited by real-world attackers. You will define test scopes, gather and analyse technical information, select appropriate testing methodologies, and conduct manual and automated testing in accordance with agreed standards and rules of engagement. Your responsibilities will include producing clear, accurate and risk-based reports that explain technical findings, business impact and practical remediation actions. You...

Learn more

Security Testing Consultant (Penetration Tester) Hybrid

Added 15/09/2026

We are seeking a Security Testing Consultant (Penetration Tester) to join a collaborative cybersecurity team on a hybrid basis. In this role, you will plan and deliver penetration tests across web applications, APIs, mobile platforms, infrastructure, cloud environments and networks. You will assess security controls, identify vulnerabilities and determine the potential business impact of weaknesses using recognised testing methodologies and industry-standard tools. The position involves working with technical and non-technical stakeholders to understand environments, agree testing objectives and provide clear, practical advice to improve security resilience. Your responsibilities will include conducting manual and automated security assessments, validating findings, safely exploiting...

Learn more

Security Testing Consultant (Penetration Tester) Hybrid

Added 15/09/2026

We are seeking a Security Testing Consultant (Penetration Tester) to join a collaborative cyber security team in a hybrid working environment. In this role, you will plan and deliver authorised penetration tests across web applications, mobile applications, APIs, networks, cloud environments and infrastructure. You will work with technical and business stakeholders to understand testing objectives, identify attack paths, assess risk and provide practical recommendations that improve overall security resilience. Your responsibilities will include scoping engagements, developing test plans, conducting manual and automated security assessments, validating vulnerabilities and maintaining accurate evidence throughout each assignment. You will prepare clear, professional reports that...

Learn more

Manager, Security Threat, Vulnerability and Testing (m/f/d)

Added 07/09/2026

We are seeking an experienced Manager, Security Threat, Vulnerability and Testing (m/f/d) to lead the development and operation of a comprehensive information security testing and vulnerability management capability. In this role, you will help protect critical systems, applications and data by identifying security weaknesses, assessing emerging threats and ensuring that appropriate remediation measures are implemented. You will work closely with technology, infrastructure, software development, risk and compliance teams to strengthen security resilience across the organisation. Your responsibilities will include managing vulnerability scanning, penetration testing, security assessments and threat-informed testing activities across on-premises and cloud environments. You will define testing strategies,...

Learn more

Senior Manager, Security Threat, Vulnerability and Testing (m/f/d)

Added 04/09/2026

We are seeking a Senior Manager, Security Threat, Vulnerability and Testing (m/f/d) to lead the development and delivery of a comprehensive cyber security assurance programme. In this strategic role, you will oversee threat intelligence, vulnerability management, penetration testing and security validation activities across a complex technology environment. You will translate emerging threats and regulatory expectations into effective controls, risk-based priorities and measurable improvements, helping to strengthen the organisation’s resilience against evolving cyber attacks. Your responsibilities will include defining and implementing the overarching strategy for threat and vulnerability management, coordinating regular infrastructure, application, cloud and network assessments, and ensuring that identified...

Learn more

Senior Manager, Security Threat, Vulnerability and Testing (m/f/d)

Added 04/09/2026

We are seeking a Senior Manager, Security Threat, Vulnerability and Testing to lead the strategic development and operational delivery of enterprise-wide cybersecurity activities. In this role, you will oversee threat management, vulnerability identification and remediation, security testing, and risk-based assurance across applications, infrastructure, cloud environments and business processes. You will establish effective governance, standards and reporting mechanisms that provide clear visibility of the organisation’s security posture and support informed decision-making at senior level. Your responsibilities will include managing and developing teams responsible for threat intelligence, vulnerability management, penetration testing, red teaming, security assessments and control validation. You will define testing...

Learn more

1st Line Security Controls Testing Manager

Added 26/08/2026

We are seeking a 1st Line Security Controls Testing Manager to lead the effective delivery of first-line security control testing across a complex and evolving environment. You will be responsible for establishing and maintaining a robust testing approach that provides clear assurance over the design, implementation and operating effectiveness of key information and cyber security controls. Working closely with control owners, risk teams, internal audit and technology stakeholders, you will help identify weaknesses, assess risk exposure and drive timely remediation. Your responsibilities will include developing risk-based testing plans; prioritising activities in line with regulatory, business and threat requirements; overseeing control...

Learn more

Cyber Security Consultant - Penetration Testing

Added 18/08/2026

Are you passionate about cyber security and eager to put your penetration testing skills to the test? An exciting opportunity awaits for a Cyber Security Consultant specializing in Penetration Testing. In this role, you will be responsible for conducting thorough security assessments, identifying vulnerabilities, and simulating real-world attacks on networks, applications, and infrastructure. You will collaborate closely with clients to understand their security landscapes, deliver detailed reports, and provide actionable recommendations to strengthen their defences. The ideal candidate will have hands-on experience in penetration testing, vulnerability assessment, and exploitation techniques. You should be proficient in using industry-standard tools such as...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.