Position Title: Principal Consultant - OT C&I
Location: Sydney, NSW
Role Purpose
As a Principal OT consultant in NCC Group's Global OT Consulting and Implementation (C&I) division, your role is pivotal in providing Cyber Security Assurance and Engineering to businesses, aiding them in safeguarding critical systems and information assets.
Your responsibilities will include building and maintaining trusted client relationships, managing teams, conducting assessments, translating technical findings into actionable roadmaps, and ensuring adherence to internal policies and procedures.
Moreover, you will play a key role in supporting sales activities and mentoring junior consultants, contributing to the overall knowledge sharing and growth within the delivery team.
You will be working with the Global OT Director to expand our global engineering capabilities.
Additionally, your responsibilities will extend to supporting the development of the C&I capability globally in some instances this could also include travel.
Summary
NCC Group specializes in offering comprehensive Cyber Assurance and engineering services aimed at assisting businesses in fortifying their cybersecurity posture. This encompasses defining security strategies, conducting risk assessments, developing policies, providing security awareness training, and offering on-demand cyber expertise.
Our core services range from strategy and governance to incident response planning and 62443 assessments. We also provide bespoke services tailored to the specific needs of organizations, including managed services, security architecture review, SOC, monitoring, DFIR, Penetration Testing, Safety reviews and cyber transformation programs.
The role within our OT division offers an exciting opportunity for individuals with prior relevant experience in the cyber and assurance field to leverage their skills in delivering high-quality solutions and fostering enduring client relationships.
What we are looking for in you
-
The ability to assess and develop cyber security engineering solutions for industrial control systems (ICS), SCADA, and other OT environments
- Provide expert consulting services in IT & OT and convergence challenges and solutions ideally with focus in the Rail sector, specifically commissioning depots or manufacturing facilities.
- Perform risk assessments and gap analyses against relevant industry standards and frameworks (NIST, IEC 62443, etc.)
- Leading workshops with suppliers and operators to facilitate 62443 Initial Risk Assessments, Detailed Risk Assessment processes and artifacts, and preparation of security cases for regulatory submission.
- Design and implement security controls specific to industrial environments
- Manage teams and projects that create and deliver technical reports and executive presentations for clients
- Understanding of emerging threats, vulnerabilities, and security solutions specific to OT environments and protocols.
- Support international teams remotely but also can travel where necessary to client sites
- Excellent communication, consulting, and presentation skills, along with exceptional written communication and reporting abilities.
- A recognised OT qualification such as GIAC GICSP, 62443 and similar
- Have delivered OT projects within a critical national infrastructure client ideally in the transport subsector.
- Ability to combine MITRE Threat Modelling, OT & Enterprise, aligned to IEC/ISA 62443.
- Experience with TS 50701 (IEC63452) standard.
- Practical experience as controls systems engineer or industrial engineering with SCADA or DCS or EMS.
Desired Skills and Qualifications:
-
Certifications like CISM, CISSP, CRISC, ISO 27001 LI/LA, CISA are advantageous.
- A degree in a science related topic (some examples are Mathematics, Computer Science, Engineering, Physics or relevant significant work experience in an operational environment)
- Proficiency in managing people and building teams, demonstrating the ability to lead and develop individuals to contribute effectively to the team's objectives and overall organizational success.
- Willingness and capability to prioritize safety of people, equipment and the environment when working in hazardous or "operating environments" such as side
Behaviours:
-
Focusing on Clients and Customers.
- Working as One NCC.
- Always Learning.
- Being Inclusive and Respectful.
- Delivery Brilliantly.
- Enabling Performance.
Ways of working
-
Focusing on Clients and Customers.
- Working as One NCC.
- Always Learning.
- Being Inclusive and Respectful.
- Delivering Brilliantly.
Our company
At NCC Group, our mission is to create a more secure digital future. That mission underpins everything we do, from our work with our incredible clients to groundbreaking research shaping our industry. Our teams' partner with clients across a multitude of industries, delving into, securing new products, and emerging technologies, as well as solving complex security problems. As global leaders in cyber and escrow, NCC Group is a people-powered business seeking the next group of brilliant minds to join our ranks.
Our colleagues are our greatest asset, and NCC Group is committed to providing an inclusive and supportive work environment that fosters creativity, collaboration, authenticity, and accountability. We want colleagues to put down roots at NCC Group, and we offer a comprehensive benefits package, as well as opportunities for learning and development and career growth. We believe our people are at their brilliant best when they feel bolstered in all aspects of their well-being, and we offer wellness programs and flexible working arrangements to provide that vital support.
Come join us?
What do we offer in return?
We have a high-performance culture which is balanced evenly with world-class well-being initiatives and benefits:
-
Superannuation
- Leaves Benefits include but not limited to:
- Annual leave – 20 days
- Sick Leave & caregivers Leave – 10 days
- Marriage/Civil Partnership Leave (1 day)
- Moving Home Leave (1 day)
- Employee Assistance Program with access to confidential counselling support 24 hours a day, 7 days a week. This is a free service for up to 6 occasions per calendar year for you and your close family.
So, what’s next?
If this sounds like the right opportunity for you, then we would love to hear from you! Click on apply to this job to send us your CV and cover letter and the relevant member of our global talent team will be in touch with you. Alternatively send your details to [email protected] .
.
.
We assess, develop and manage cyber threats across our increasingly connected society. We advise global technology, manufacturers, financial institutions, critical national infrastructure providers, retailers and governments on the best way to keep businesses, software and personal data safe.
With our knowledge, experience and global footprint, we are best placed to help businesses identify, assess, mitigate & respond to the risks they face.
We are passionate about making the Internet safer and revolutionising the way in which organisations think about cyber security.
Headquartered in Manchester, UK, with over 35 offices across the world, NCC Group employs more than 2,000 people and is a trusted advisor to 15,000 clients worldwide.
We review every application received and will get in touch if your skills and experience match what we’re looking for. If you don’t hear back from us within 10 days, please don’t be too disappointed – we may keep your CV on our database for any future vacancies and we would encourage you to keep an eye on our career opportunities as there may be other suitable roles.
If you do not want us to retain your details, you can utilise the Manage Your Data tool provided by Pinpoint or contact us directly at:
[email protected]. All personal data is held in accordance with the NCC Group Privacy Notice.
We are committed to diversity and flexibility in the workplace. If you require any reasonable adjustments to support you during the application process, please tell us at any stage.
Please note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process.