OT Security Consultant

Imagine your customer is a leading energy provider or critical infrastructure operator, specializing in the delivery of essential services that keep industries and communities running. As an OT security professional, your mission is ambitious: to optimize operational efficiency, ensure compliance with industry-leading certifications, and protect the systems at the heart of your client’s operations.

Do you want to contribute to digital security in the Netherlands and beyond? In this context, we are looking for an OT Security Consultant.

As a consultant, you will work with a wide range of clients across various industries. You will help them strengthen the security of their industrial systems and prepare them for digital growth.

Through practical training sessions, you will introduce clients to IEC 62443, the leading standard for OT security. You will work on gap assessments or risk assessments based on IEC62443, IT/OT site assessments, Threat Modeling, NIS2 compliance checks and Security Maturity Assessments. All these services are designed to support our customers to identify risks and improve their security resilience, no matter their current security maturity state. On top of these services, you will also provide specific OT security training and perform OT security research.

You will act as a trusted partner to your clients. As an expert, you will provide advice, contribute ideas, and help them tackle cybersecurity challenges. Drawing on your knowledge of penetration testing, risk assessment, governance OT architecture and OT security, you will make their systems more resilient. From securing industrial networks to protecting critical processes, your work will have a real impact.

And your success goes beyond simply "meeting compliance requirements." You ensure that your clients' OT environments are secure and future-ready.

What will you do?

• Perform advisory services on our client’s SCADA/ICS/OT infrastructure for small to large-sized projects. This will include security risk assessments based on IEC 62443 methodology, gap assessments, security maturity reviews, trainings and consultancy support;
• Provide support in security design and security architecture of industrial networks and provide recommendations to improve the design;
• Assist customers in establishing or extending their SCADA/ICS/OT security program by building joined roadmaps;
• Apply secure by design principles, threat modelling, and risk assessment to OT products;
• Demonstrate strong knowledge of the IEC 62443 set of standards the Cyber Resilience Act (CRA), NIS2, and industry-specific standards like TISAX, UR E26/E27, EASA Part-IS and so on.
• Deliver OT Cybersecurity training courses on IEC62443, CRA, and other standards and regulations
• Collaborate with engineering and supply chain teams to implement and verify effective security controls.
• Interpret security vulnerabilities, risks, policies, and procedures concerning the operational business impact;
• Manage and execute assessments based on internationally recognized frameworks or specific frameworks developed by Bureau Veritas Cybersecurity and support in certification journey;
• Support our sales with your technical expertise;

What do you bring?

• Experience with industrial systems such as PLCs, DCS, or SCADA.
• Familiarity with industrial protocols such as Modbus or IEC 104.
• Experience conducting risk assessments and threat modelling.
• Excellent communication skills in both German and English. You can effectively engage with stakeholders at all levels, from C-level executives to technical specialists and non-technical contacts.
• Knowledge of standards and frameworks such as IEC 62443, MITRE ATT&CK for ICS, NIST CSF, or NIST SP 800-82.
• Experience sharing knowledge, for example through white papers, presentations, or speaking engagements or ambition to do so would be a big plus.
• A proactive personality. You think along with clients and know how to bring people on board with your ideas.

What can you expect at Bureau Veritas Cybersecurity?

At Bureau Veritas Cybersecurity you work in an environment where trust, expertise and social impact are key. We believe that you can really make a difference when you get the space to deepen your knowledge and actively contribute to a safer digital society. What does that look like in practice?

Impactful growth: The cybersecurity division of Bureau Veritas is rapidly growing, and you will have the chance to grow along with it. Whether it's about taking on more responsibilities, increasing your visibility within and outside the organ