Description

My client is looking for a IEC 62443 OT Risk Assessor to audit IT/Engineering operation technology for a variety of clients to IEC62443. You will have experience in this area, along with experience of National critical infrasturcture with in the Utilities / Transport or Defence industry. Duration: 12 months Location: Remote - travel to customer sites Inside IR35 - DV Level Security Clearance is essential Core Responsibilities Conduct Risk Assessments: Execute initial high-level risk assessments (per IEC (phone number removed)-2) to identify worst-case unmitigated risks and detailed risk assessments where threats exceed tolerable levels. Impact & Consequence Analysis: Evaluate the physical, safety, environmental, and financial impacts of a potential cyber disruption on critical industrial processes and plant operations. [ Zone and Conduit Definition: Collaborate with engineering teams to segment networks into secure zones and conduits based on data flows and target Security Levels (SL-T). [ Vulnerability & Gap Analysis: Review system architectures, existing countermeasures, network drawings, and asset inventories to locate security gaps.  Documentation & Remediation: Produce risk registers, security requirements specifications (CRS), and actionable, time-bound remediation roadmaps for stakeholders. Key Requirements & Qualifications Standard Knowledge: Deep familiarity with the framework OT/ICS Experience: Understanding of industrial network architectures, SCADA systems, and the Purdue Model. Soft Skills: Ability to translate complex technical risks into clear business impacts for non-technical leadership. For further information please can you send your CV in the first instance ot  or call (phone number removed)