About the Position

Senior OT Security & Product Security Consultant (CRA / IEC 62443 / Maschinenbau

SOLCOM GmbH is seeking a Senior OT Security & Product Security Consultant with expertise in CRA, IEC 62443, and industrial systems for a freelance role in the Nähe St. Gallen, Germany area.

Responsibilities

In this freelance position, you will work at the intersection of OT-Security, Product Security, and regulatory requirements. Your role will involve:

Conducting risk analyses and coordinating them technically and methodologically.
Evaluating existing threat models and systematically addressing threats.
Reviewing existing security analyses, identifying gaps, and deriving risks.
Applying CRA requirements to products and product contexts, considering regulatory guidelines.
Considering requirements from the Machinery Ordinance and other relevant compliance frameworks.
Prioritizing measures and developing actionable recommendations and roadmaps.
Supporting regulatory evidence, technical documentation, and compliance documents.
Evaluating suppliers, components, and security-relevant dependencies along the supply chain.
Preparing, moderating, and coordinating workshops with technical and subject matter stakeholders.
Supporting audit preparations and compliance-related coordination with a pragmatic approach.
Bringing your experience in OT Security, Product Security, Threat Modeling, and Security Assessments into active use.
Working independently, analytically, and solution-oriented in an environment of high technical complexity.

Requirements

Must-haves

More than several years of practical experience in OT Security and Product Security.
Experience with the Cyber Resilience Act (CRA) and IEC 62443.
Experience in machinery or plant construction and with industrial controls (SPS/PLC).
Knowledge of industrial networks, security assessments, threat modeling, and risk analyses from practice.
Experience with technical documentation, compliance evidence, and security-by-design.
Experience in vulnerability management and cross-departmental workshops.
Ability to work independently, structured, pragmatically, and with a clearly risk-based approach.
Ability to explain technical and regulatory requirements comprehensibly and prepare them for the target audience.
Minimal need for technical guidance and a pronounced hands-on mentality.
Ideally, a degree or comparable education in computer science, IT security, automation engineering, electrical engineering, mechanical engineering, or a similar field.
Alternatively, verifiable, demonstrable project experience.
Desirable experience with the Machinery Ordinance, Embedded Systems, HMI Systems, and international corporate structures.

Nice-to-haves

Experience with the Machinery Ordinance.
Experience in the environment of industrial machines for the food or process industry.
Experience with Embedded Systems.
Experience with HMI Systems.
Experience with audit preparation and compliance projects.
Experience in international corporate structures.
Experience with Product Security Governance.
Experience with security requirements throughout the product lifecycle.
Experience from comparable CRA or IEC 62443 projects.

Framework Conditions

The client plans to engage with a scope of 0.5 FTE. Preferably, either a full-time engagement (100%) over 6 months or alternatively a part-time engagement (50%) over 12 months.

The engagement can mostly take place remotely, but occasional on-site workshops in the St. Gallen area are planned.

We Offer

Opportunity to work in a dynamic and innovative environment.
Flexible working hours and the possibility to work remotely.
Engaging projects with leading companies in the industrial sector.
Continuous professional development opportunities.

About the Company

SOLCOM GmbH is a leading provider of IT and consulting services, specializing in security, compliance, and industrial automation. We are committed to helping our clients achieve their business objectives through cutting-edge technology and expert knowledge.

Apply now to join our team and contribute to the security and compliance of industrial systems.

Senior OT Security & Product Security Consultant (CRA / IEC 62443 / Maschinenbau

Job description