OT Security and AI Compliance, IEC 62443, EU AI Act, Manufacturing, Remote

Llamazing Digital Engineering GmbH
Contact person: Björn Froese
BerlinBrandenburg,  Germany
100% remoteFreelanceStart date 1/2027Duration 6 months100% workload
End client
ITNIS 2ComplianceComputer SecuritySupervisory Control and Data Acquisition (SCADA)ISO/IEC 27001Production SystemsRisk AnalysisIEC 62443Data ProtectionGDPR

Description

For agentic AI projects in industrial manufacturing in the DACH region, we are looking for experienced experts in OT security and AI compliance (m/f/d) to join our expert pool. The work is 100% remote, and we welcome applications from anywhere in the world.

A typical project looks like this:

Starting point
A manufacturing company wants to handle production disruptions with an agentic workflow. When a machine fails, AI agents gather information from MES, production planning, maintenance and documentation, evaluate options (e.g. wait for the repair or move orders to an alternative machine) and present them to the responsible roles for approval. Only after human approval are the maintenance order and the rescheduling executed in the target systems. Direct machine control is not planned; approvals are signed and every step is fully logged. You assess what this means for security and regulation before the system is connected to real plant systems.

Responsibilities
  • Security assessment of the connection to MES, planning and maintenance systems according to IEC 62443 (zones and conduits, target security levels)
  • Justify the classification of the system under the EU AI Act (including the distinction from high-risk systems) and derive transparency obligations
  • Define requirements for audit trail, retention and evidence from the customer's perspective
  • Point out links to NIS2, the Machinery Regulation, GDPR and works council co-determination for staff data
  • Review the architecture and control concept and identify gaps
  • Present results clearly to IT, plant and executive management
Must have
  • At least 5 years of experience in information security, OT security or IT compliance in industrial companies
  • Hands-on experience with IEC 62443 in manufacturing environments or with classifying AI systems under the EU AI Act (at least one of the two)
  • Experience with risk analyses and security concepts for networked production systems or AI applications
  • Fluent English
  • At least 4 hours of daily overlap with Central European Time (CET)
Nice to have
  • Both focus areas: IEC 62443 and EU AI Act
  • NIS2, ISO 27001, Machinery Regulation (EU) 2023/1230
  • Experience connecting plant systems to the cloud
  • Certifications (e.g. ISA/IEC 62443 Cybersecurity Expert, ISO 27001 Lead Auditor, CISSP, AIGP)
  • German language skills
Terms
  • Location: 100% remote
  • Duration: typically 3 to 6 months, extension possible
  • Start: depending on the project, from Q1 2027
  • Contract: freelance, invoicing in EUR
Application
Please answer briefly:
  1. Which IEC 62443 assessment or which EU AI Act classification of an AI system did you most recently carry out (industry, scope, your role)?
  2. How do you decide whether an AI-supported workflow in production is a high-risk system under the EU AI Act?
  3. What is your hourly rate in EUR, how many hours per week can you offer, where are you based (country and time zone), and when are you available?
In email communication please always include the project ID of this ad. Please do not call unless an appointment has been arranged.

Application form