This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a OT Security Architect based in Spain.
This is a senior consulting opportunity focused on shaping enterprise Operational Technology cybersecurity for regulated manufacturing environments. You will lead the development of OT security standards, reference architectures, governance frameworks, and security guidelines across complex industrial environments. The role combines strategic architecture with hands-on expertise in network segmentation, secure connectivity, identity and access management, and industrial cybersecurity. You will work across IT, OT, Engineering, Manufacturing, Quality, and Cybersecurity teams to translate security principles into practical enterprise standards. A key part of the role involves applying recognized frameworks such as IEC 62443 and NIST SP 800-82 to strengthen OT resilience. This position is well suited to an experienced OT/ICS security leader who can influence senior stakeholders and drive security architecture decisions in highly regulated environments.
Accountabilities:
- Lead stakeholder workshops involving IT, OT, Engineering, Manufacturing, Quality, and Cybersecurity teams.
- Define OT cybersecurity strategies, architecture principles, security standards, and governance frameworks.
- Develop Security Zones and Conduits methodologies aligned with IEC 62443.
- Establish Defence-in-Depth security architectures based on the Onion Model.
- Define OT network segmentation strategies and firewall architecture standards.
- Establish secure connectivity requirements between OT environments, enterprise IT, and cloud platforms.
- Develop OT identity and access management requirements, including privileged access controls.
- Define cybersecurity requirements for OT vulnerability management and incident response.
- Ensure OT security architectures align with relevant regulations, corporate standards, and data protection requirements.
- Lead technical architecture reviews, governance forums, and documentation and sign-off processes.
- Translate complex security requirements into practical enterprise standards and reusable reference architectures.
Requirements:
- 12+ years of cybersecurity experience, including at least 7 years specifically focused on OT/ICS cybersecurity.
- Proven experience working within regulated manufacturing environments.
- Strong practical knowledge and application of IEC 62443 and NIST SP 800-82.
- Deep expertise in Industrial Control Systems and manufacturing cybersecurity.
- Experience conducting OT security risk assessments and establishing cybersecurity governance.
- Strong understanding of the Purdue Model, industrial DMZ architectures, and OT network segmentation.
- Extensive knowledge of firewall security architecture within industrial environments.
- Experience defining and implementing identity and access management requirements for OT environments.
- Knowledge and practical experience with OT incident response.
- Strong ability to lead cross-functional workshops and communicate complex security concepts to both technical and business stakeholders.
- Demonstrated ability to translate cybersecurity requirements into enterprise standards, governance frameworks, and reference architectures.
- Strong consulting, communication, stakeholder management, and technical leadership skills.
Benefits:
- Freelance / contract engagement.
- Fully remote position.
- Europe-based opportunity.
- Expected start date: October 2026.
- Full-time allocation of 40 hours per week.
- Opportunity to lead OT cybersecurity architecture for regulated manufacturing environments.
- Exposure to complex industrial cybersecurity, enterprise governance, and international stakeholder environments.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
