Lead Consultant (OT Security)

We are seeking self-motivated and driven security consultants to join our team. The ideal candidate will have at least 10 years of experience in OT/ICS cybersecurity and will provide professional services and advisory to our clients. This role involves assessing security measures, identifying vulnerabilities, and recommending solutions to enhance our clients' security posture focused on ICS/OT security
Duties & Responsibilities
Lead and develop a team of consultants to deliver high-quality OT/ICS security engagements, providing coaching, quality assurance, and technical direction.
Serve as engagement lead and primary escalation point on complex or high-value projects, ensuring deliverables meet quality, timeline, and margin expectations.
Manage multiple concurrent projects and delivery teams, balancing resourcing, utilisation, and client priorities.
Conduct and oversee security assessments and audits to identify threats, vulnerabilities, risks, and control gaps in ICS/OT environments.
Develop security policies, procedures, and standards, as well as incident response plans, procedures, and playbooks.
Perform cyber threat modelling and develop cyber threat profiles based on relevant threat actor Tactics, Techniques & Procedures (TTPs).
Design scenarios for cybersecurity Table-Top Exercises (TTX) and facilitate delivery for ICS/OT clients.
Perform security architecture reviews on ICS/OT systems to identify control gaps and advise on remediation roadmaps.
Develop and optimise methodologies, frameworks, workpapers, report templates, and tools to improve consistency, quality, and efficiency of service delivery.
Prepare and review high-quality reports and documentation for clients.
Stay updated with the latest cybersecurity trends, threats, regulatory developments, and technologies affecting OT/ICS environments.
Business Development
Own and grow a portfolio of client relationships, acting as a trusted advisor to clients.
Identify, qualify, and pursue new business opportunities; build and maintain a healthy sales pipeline for ICS/OT security and adjacent GRC services, with accountability for pipeline and revenue targets.
Lead presales activities end-to-end, including opportunity shaping, solutioning, proposal and bid development, effort estimation, pricing input, and client presentations.
Drive account expansion by identifying cross-sell and up-sell opportunities within existing engagements and coordinating with account and sales teams.
Develop go-to-market collateral, service offerings, and thought leadership (e.g. white papers, briefings, conference presentations) to strengthen the practice's market presence.
Represent the firm at industry events, forums, and client briefings to build brand visibility and generate leads.
Cultivate partnerships with technology vendors, regulators, and industry bodies relevant to the OT/CII ecosystem.
Track market developments, competitor activity, and regulatory changes to inform service strategy and identify emerging demand
Degree or higher in Cybersecurity, Computer Science, Engineering, or Information Systems.
Minimum of 10 years in information security, with substantial experience in OT/ICS security, governance, risk management, and audit; experience in other areas of information security will be considered.
Demonstrated track record in business development, presales, or practice growth — including shaping opportunities, developing winning proposals, and building client relationships that convert to revenue.
Experience in Singapore-based Government and/or Critical Information Infrastructure (CII) projects will be an added advantage.
Knowledge of cybersecurity frameworks, industry standards, and regulatory requirements is a must, including:
IEC62443
NIST Cyber Security Framework;
Cybersecurity Code of Practice;
MITRE ICS ATT&CK Framework
At least one relevant industry certification such as CISSP, CRISC, CISM, CISA, GICSP or GRID.
Customer Proven experience leading teams and managing senior client stakeholders.
Excellent oral and written communication, with strong executive presence and the ability to present credibly to C-suite audiences.

Employment type
Full-time

Work arrangement
No