OT Security Manager

About the role

Glocomms is partnering with a leading energy infrastructure organization to hire an OT Security Manager who will lead both technical OT security operations and governance, risk, and compliance (GRC) efforts. This role oversees security tooling in operational environments, manages regulatory compliance programs, and acts as the key bridge between engineering teams, leadership, and external auditors.

Responsibilities

• Manage OT security engineers and GRC analysts supporting operational environments
• Oversee security tooling (SIEM, vulnerability scanning, configuration monitoring) and ensure findings are tracked through remediation
• Establish audit-ready processes, documentation standards, and evidence collection
• Lead OT compliance programs aligned to NERC CIP standards (CIP-006, 007, 008, 010, 011)
• Own audit preparation, regulatory engagement, and response management
• Maintain risk register, control framework, policies, and exception handling processes
• Monitor regulatory changes and drive program updates
• Translate technical findings into business risk for leadership and non-technical stakeholders
• Serve as the primary contact for audits and regulatory interactions
• Deliver clear reporting, briefings, and documentation across audiences

Requirements

• 7+ years of OT/ICS cybersecurity or critical infrastructure security experience
• Experience leading NERC CIP compliance programs in regulated environments
• Hands-on knowledge of OT security tools (e.g., SIEM, vulnerability management, integrity monitoring)
• Experience managing both technical security teams and GRC/compliance teams
• Strong understanding of risk management, policy development, and audit processes
• Excellent communication skills across technical and executive audiences
• Relevant certifications preferred (CISSP, CISM, GICSP, or similar)
• Familiarity with frameworks such as NIST CSF, NIST 800-82, or IEC 62443
• Experience in multi-site or complex critical infrastructure environments

Why Join

• High-impact role at the intersection of cybersecurity, critical infrastructure, and regulatory compliance
• Opportunity to lead and mature a growing OT security program
• Work closely with both technical teams and executive leadership