Jobs in London - Risk Management Specialist • Central London

Company: Bestman Solutions

Central London

OT Risk Specialist – Contract – HybridWe are supporting a large, highly regulated organisation delivering Critical National Infrastructure services. The environment spans complex IT and OT estates, where cyber risk directly intersects with safety, availability, and regulatory obligations.They are seeking an OT Risk Specialist to strengthen their Governance, Risk & Compliance capability. This is a hands-on, delivery-focused role for a risk specialist who can independently identify, assess, articulate, and drive the management of OT cyber risk across live operational environments.This role is not about frameworks for the sake of frameworks. It is about practical risk ownership, clear judgement, and credible challenge. You will be trusted to operate with minimal hand-holding, working directly with engineers, risk owners, and leadership to ensure OT risks are properly understood and proportionately treated.What you’ll be doingIndependently deliver qualitative and quantitative OT cyber risk assessments, using recognised risk methodologies and sound professional judgementIdentify, assess, document, and actively manage OT and ICS cyber risks across operational and enterprise environmentsOwn and maintain OT risk registers end-to-end, including risk statements, treatments, control profiles, and supporting evidenceEngage directly with OT stakeholders (engineering, operations, maintenance) to understand asset criticality, safety implications, and operational constraints without disrupting live servicesTranslate technical OT risk into clear business impact, covering safety, availability, regulatory exposure, and financial riskSupport supply chain and third-party OT cyber risk assessments, including remote access, managed service providers, and vendor connectivityProvide credible input into governance forums, reporting, and assurance activities, representing OT risk with authority and clarityContribute to the ongoing maturity of OT risk and risk quantification practices, improving consistency and decision-makingSupport compliance with internal controls and external regulatory and legislative obligations relevant to CNI and OT environmentsWhat you’ll bring3–5+ years’ experience in cyber or information security risk, with practical exposure to OT / ICS environmentsProven experience delivering risk assessments independently, from scoping through to treatment and reportingStrong working knowledge of risk frameworks such as ISO 27005, OCTAVE, FAIR / FAST, with the ability to apply them pragmaticallyExposure to OT and regulatory standards including IEC 62443, NIS / CAF (or NIS-D CAF), NIST CSF, ISO 27001Confidence engaging and challenging senior technical and operational stakeholders without escalation or supervisionA delivery mindset: comfortable making decisions, documenting risk clearly, and moving work forward without hand-holding