Head of OT & ICS Security Testing

Job ID:44286

Location:Birmingham : 1 Trinity Park : Bi

Position Category:Technical

Position Type:Employee Regular

Head of OT & IC security testing

Leads LRQA's operational technology and industrial control systems security testing service line, covering OT and IPC assessments, OT penetration testing, IEC 62443-aligned reviews and supporting advisory across energy, utilities, manufacturing, maritime and process industries. To establish and scale a safety-first OT and IC testing capability that allows industrial clients to understand and reduce cyber risk in live operational environments, and to grow it into a differentiated, profitable service line that we cross-sell across LRQA Cyber.

Working conditions

Hybrid or remote, aligned to an LRQA office or home location within one of the delivery regions (UK&I, Greece, US, Mexico, Kuala Lumpur, APAC). Regular domestic and international travel to client sites, LRQA offices and industry events. Occasional out-of-hours and weekend working to meet client testing windows. This is a billable leadership role: the postholder carries a personal utilisation target alongside leadership accountabilities.

Performance measures

• Personal utilisation against the 40% target (approximately 8 days per month).
• Service line order intake, revenue and margin against plan.
• Pipeline contribution and win rate on opportunities where the postholder acts as technical sales lead.
• Delivery quality: client satisfaction, report quality, on-time delivery and no material quality escapes.
• Accreditation and scheme compliance status for the service line.
• People: retention, engagement, and completion of the 5x5x5 training model (5 days of allocated training time, £5k of funding and 5 certifications per consultant, per year).
• Contribution to the pooled operating model: consultant cross-skilling and successful redeployment across service lines.

Reporting structure

Reports to the Head of Offensive Services. Peer to the Heads of the other four offensive service lines. Leads the team/pod leads and will have consultants reporting to them within the service line and, through them, consultants drawn from a pooled capability of approximately 100 offensive security consultants. Consultants are allocated against demand rather than held permanently within a single service line.

Key Responsibilities

• Own the OT and IC testing proposition, methodology and safety-first testing standards for work in live plant, production and control environments.
• Align the service line to IEC 62443, NIS2 and sector regulation, and build the lab, tooling and reference environments needed to test safely.
• Act as a technical sales lead: shape scope with clients, support bids and proposals, and present credibly to both technical and executive buyers.
• Lead, develop and retain the pod leads and consultants in the service line, setting technical direction, career pathways and certification plans under the 5x5x5 training model.
• Deliver personally on client engagements to the role's utilisation target, retaining hands-on technical credibility with clients and the team.
• Drive AI-enabled support: adopt and govern AI