08/04/2026 updated
100 % available
OT/ICS Cyber Security Consultant | IEC 62443 Expert | CNI Architecture & Assurance
United Kingdom
United Kingdom
CISSP (ISC)2 (2024); ISA/IEC 62443 Cybersecurity ExpertPenetration TestingCisco Certified Internetwork Expert Security (CCIE Security)Cisco PIXSupervisory Control and Data Acquisition (SCADA)Network SecurityWiresharkVulnerability ManagementIEC 62443SnortMetasploitCisco
IEC 62443 & OT/ICS Cybersecurity Architecture
Deep expertise in translating IEC 62443 and project requirements into practical system-of-systems architecture, zone-and-conduit design and vendor-package security architectures across critical infrastructure environments including oil and gas, rail, maritime and manufacturing.
Risk Assessment & Compliance Frameworks
Extensive application of risk and assurance frameworks including IEC 62443, NIST SP 800-82, NIS2 Directive, TS 50701, ISO 27001/27005, EBIOS Risk Manager, MITRE ATT&CK for ICS, Purdue Model and STRIDE across diverse industrial and enterprise environments.
OT Security Integration & Delivery Lifecycle
Leadership of OT cybersecurity integration across large-scale projects covering FEED and detailed design, supplier coordination, design reviews, FAT, SAT, ISAT, commissioning, handover, vulnerability management and incident response.
Firewall & Network Security
Hands-on experience with FortiGate, Check Point, Palo Alto, Cisco ASA and Juniper platforms; delivered firewall transformation, segmentation, policy migration and network architecture reviews across enterprise and OT environments.
Vulnerability & Penetration Testing
Practical use of Qualys VMDR, Nessus, Metasploit, Kali Linux, Wireshark, Snort and OWASP methods for vulnerability management, penetration testing and incident-response activities in IT and ICS environments.
OT Monitoring & Asset Visibility
Deployment and use of Claroty CTD, Nozomi Guardian and Splunk for OT network monitoring, passive asset discovery, threat detection and security logging in industrial environments.
IoT & AI Security
Certified IoT Architect with knowledge of IoT security controls and practitioner-level certification; applied study of NIST AI RMF, LLM security risks and AI security foundations including AKYLADE AI Security Foundation.
Supplier & Vendor Assurance
Coordination of OEM compatibility decisions, deviation and evidence management, compliance matrices and supplier assurance activities across 55+ third-party package systems in greenfield critical national infrastructure projects.
SCADA & Industrial Control Systems Security
Design and assessment of OT security for offshore platforms, gas pipelines, Process Control Networks, DCS, SIS, SCADA, PLC and PI systems; certified Lead SCADA Security Manager and SCADA Security Architect.
Deep expertise in translating IEC 62443 and project requirements into practical system-of-systems architecture, zone-and-conduit design and vendor-package security architectures across critical infrastructure environments including oil and gas, rail, maritime and manufacturing.
Risk Assessment & Compliance Frameworks
Extensive application of risk and assurance frameworks including IEC 62443, NIST SP 800-82, NIS2 Directive, TS 50701, ISO 27001/27005, EBIOS Risk Manager, MITRE ATT&CK for ICS, Purdue Model and STRIDE across diverse industrial and enterprise environments.
OT Security Integration & Delivery Lifecycle
Leadership of OT cybersecurity integration across large-scale projects covering FEED and detailed design, supplier coordination, design reviews, FAT, SAT, ISAT, commissioning, handover, vulnerability management and incident response.
Firewall & Network Security
Hands-on experience with FortiGate, Check Point, Palo Alto, Cisco ASA and Juniper platforms; delivered firewall transformation, segmentation, policy migration and network architecture reviews across enterprise and OT environments.
Vulnerability & Penetration Testing
Practical use of Qualys VMDR, Nessus, Metasploit, Kali Linux, Wireshark, Snort and OWASP methods for vulnerability management, penetration testing and incident-response activities in IT and ICS environments.
OT Monitoring & Asset Visibility
Deployment and use of Claroty CTD, Nozomi Guardian and Splunk for OT network monitoring, passive asset discovery, threat detection and security logging in industrial environments.
IoT & AI Security
Certified IoT Architect with knowledge of IoT security controls and practitioner-level certification; applied study of NIST AI RMF, LLM security risks and AI security foundations including AKYLADE AI Security Foundation.
Supplier & Vendor Assurance
Coordination of OEM compatibility decisions, deviation and evidence management, compliance matrices and supplier assurance activities across 55+ third-party package systems in greenfield critical national infrastructure projects.
SCADA & Industrial Control Systems Security
Design and assessment of OT security for offshore platforms, gas pipelines, Process Control Networks, DCS, SIS, SCADA, PLC and PI systems; certified Lead SCADA Security Manager and SCADA Security Architect.
Languages
EnglishNative speaker
Project history
Leading OT cybersecurity integration for the Ruwais LNG Project (ADNOC/JV), a greenfield critical national infrastructure programme. Responsibilities include translating IEC 62443 and project specifications into system-of-systems and zone-and-conduit security architectures, driving design risk assessments, compliance and integration matrices, supplier evidence and OEM compatibility decisions, designing segmented architectures across DCS, SIS and third-party systems, and developing integration strategies for centralised OT security services.
Cairo Monorail project. Delivered EBIOS Risk Manager, compliance and architecture assessments across rolling stock, signalling, AFC, platform systems, CCTV, public address, LTE, MicroSCADA Pro and RTU500 environments. Mapped treatment plans and engineering requirements to IEC 62443-3-2, ISO 27005, TS 50701 and Egyptian legislation; collaborated with Nokia on network architecture and assessed FortiGate, IDS and F5 DNS controls.
Led risk, vulnerability and incident-response activities; implemented risk-based remediation using threat intelligence, system-owner validation and penetration-test evidence, and designed IoT security controls.