Cyber Security Manager - Operational Technology (OT)

Job Description Summary

We are seeking an experienced Operational Technology (OT) Cyber Security Manager with a minimum of 7 years of relevant experience, typically gained in OT cybersecurity or closely related roles. The successful candidate will be responsible for overseeing and managing the cybersecurity of OT systems that are critical to the control and monitoring of industrial operations across marine and industrial domains.

These OT environments present unique challenges due to their domain-specific operational requirements and the potential for cyber threats to directly impact physical processes, safety, and operational continuity. This role requires a strong understanding of OT systems, industrial control systems (ICS), and industrial networking, as well as the ability to define and implement cybersecurity controls aligned with the ISA/IEC 62443 architecture and standards.

This role involves work on critical national infrastructure and will require the
successful candidate to undergo pre-employment screening, including Baseline Personnel Security Standard (BPSS) checks and be eligible for UK Security Clearance (SC) or already hold it (this can be transferred with transfer document only if they are in work).

GE Vernova's Power Conversion & Storage business applies the science and systems of power conversion to help drive the electric transformation of the world's energy infrastructure. Designing and delivering advanced motor, drive and control technologies that evolve today's industrial processes for a cleaner, more productive future, it serves specialized sectors such as energy, marine, industry and all related services.

Job Description

In this role you will:

• Design, implement, and manage comprehensive OT security strategies, policies, and procedures that align with organisational objectives, industrial standards and regulatory requirements.
• Conduct risk assessments to identify vulnerabilities/ and develop mitigation plans to protect critical OT assets on projects.
• Work closely with project engineering, field service and product development teams to integrate cyber security measures into OT processes and technologies.
• Develop and deliver security awareness training programs for controls systems engineers to foster a culture of security and compliance.
• Ensure compliance with relevant industry standards and regulations, such as ISA/IEC 62443, NIST800 SP, etc.
• Stay current with the latest cyber security trends, threats, and technologies to continually improve the organisation's OT security posture.
• Provide cyber security advice and assistance to the engineering and other relevant teams.
• Own production of technical documentation for system architecture, IP design, verification plans.
• As the team leader, oversee the daily management of the engineers within the team, set clear performance expectations and conduct regular performance reviews.
• Guide and mentor team members to achieve individual and team goals.
• Monitor and manage team budgets and expenditures as required.
• Serve as the main point of contact for team-related inquiries and issues.
• Coordinate engineering resource planning, review and advance projects, and provide mentorship and guidance to project teams.

• Degree level qualification in Cyber Security, Computer Science, Electrical and Electronic Engineering or a related field (or equivalent professional qualifications and/or experience).
• Proven experience in cyber security management, specifically within an OT environment.
• In-depth knowledge of OT systems, industrial control systems (ICS), SCADA, and DCS technologies.
• Strong understanding of cyber security frameworks and standards, such as IEC62443, NIST, CIS and others.
• Excellent analytical, problem-solving, and decision-making skills.
• Strong leadership and communication skills, with the ability to work effectively in cross-functional teams.
• Experience of working with Cybersecurity tools such as Wireshark, CIS Benchmark, Trellix, Acronis and Microsoft virtual environments.
• Due to the nature of the projects, the successful candidate must have the right to work in the UK and be eligible to obtain UK SC Government Security Clearance.

• Experience working with antivirus, encryption and endpoint security tools.
• Ability to work concurrently with multiple customers on different initiatives.
• Ability to prioritize and handle multiple competing tasks.
• Team player / influencer-collaborates with others to solve problems.
• Works well in an ambiguous environment.
• Capable of learning new technologies in a self-directed manner.
• Relevant certifications such as ISA/IEC 62443 certification, CISSP, CISM, or GICSP are highly desirable.

• Challenging and exciting projects within marine, offshore and industrial applications.
• A work environment where we understand that not everyone has the same expectations about their jobs, careers and work-life balance and we are happy to discuss flexibility requirements.
• Attractive compensation with an annual bonus scheme and company car scheme.
• Flexible benefits so you can build a package that fits your personal needs. Some core benefits are: Employer pension contribution (not subject to individual contribution), Income protection, Private Health Insurance and Life Assurance.
• 34 Days vacation (including bank holidays)