Job Description

OT CYBERSECURITY ANALYST

CCL Global are currently recruiting for an OT Cyber Security Analyst to support critical infrastructure environments. This role will play a key part in strengthening operational technology (OT) security posture through hands-on engineering, monitoring, and governance activities across complex industrial systems.

Type of Contract: Contract (Inside IR35)

Location: Culham, Oxfordshire (Hybrid – 2 days on site)

Contract Length: Until December 2026

Key Duties Will Include:

Implement and maintain OT security controls across industrial and critical infrastructure environments.

Support the development and execution of OT security strategies, policies, and standards.

Conduct OT security risk assessments, gap analysis, and remediation planning.

Ensure compliance with industry frameworks such as IEC 62443, NIST CSF, CAF, and ISO 27001.

Work closely with engineering and operations teams to embed security controls within OT systems.

Collaborate with managed service providers (MSPs) to ensure effective delivery of security services.

Support integration of OT environments with SIEM/SOC tools for monitoring and incident response.

Contribute to network segmentation and secure architecture within OT environments.

Produce clear documentation, including policies, standards, and technical guidance.

Provide technical recommendations to improve OT security maturity and resilience.

Requirements:

Proven experience working within OT, ICS, or critical infrastructure environments (e.g. oil & gas, rail, chemical).

Strong knowledge of OT security frameworks including IEC 62443, NIST CSF, CAF, and ISO 27001.

Hands-on experience implementing OT security controls and strategies.

Experience with OT network architecture, segmentation, and industrial protocols.

Familiarity with SIEM/SOC integration within OT environments.

Experience conducting risk assessments and developing remediation plans.

Ability to work collaboratively with engineering, operations, and third-party providers.

Strong communication and documentation skills.

Desirable:

Experience with OT asset discovery and monitoring tools.

Exposure to regulatory frameworks such as the NIS Directive or UK CAF.

Understanding of ITSM processes and service delivery models