Industrial and Product Security (IEC 62443) expert

We are looking for IEC 62443 experts (multiple roles) for industrial asset owners and product manufacturers. The role covers plant and site security under IEC 62443-2-1, 3-2 and 3-3, and product security under IEC 62443-4-1 and 4-2. You will own technical delivery, client relationships and the quality of work products.
Key responsibilities:
• Lead security risk assessments of industrial control systems, including zone and conduit partitioning and target security level determination under IEC 62443-3-2.
• Assess existing systems against IEC 62443-3-3 system requirements and define prioritised remediation roadmaps.
• Assess and develop asset owner security programmes under IEC 62443-2-1, including asset inventory, patch management, secure remote access and incident response.
• Review plant network architectures, segmentation and third-party access arrangements.
• Assess integration and maintenance service providers against IEC 62443-2-4.
• Assess and implement secure development lifecycle processes under IEC 62443-4-1.
• Perform threat modelling and derive component security requirements under IEC 62443-4-2 for controllers, gateways, embedded and connected devices.
• Define security verification and validation plans and coordinate penetration and fuzz testing with the laboratory.
• Prepare clients for product and process certification and coordinate with certification bodies.
• Map IEC 62443 work products to the EU Cyber Resilience Act and related regulations where clients sell into Europe.

Work arrangement
No