Manager - OT Cyber Security

This is a brand-new position, created to give CPP a clearly named Manager - OT Cyber Security lead across all customer project delivery. You'll build and maintain an executive-endorsed OT cyber security management program, and embed secure-by-design principles across the full project lifecycle — from tendering through design, procurement, construction, commissioning and handover. You'll work closely with our engineering teams, executives, legal, procurement and bid staff, design and project managers, commissioning and construction staff, customers and their cyber leads, and suppliers and subcontractors. This role is squarely focused on Operational Technology (OT) cyber security for projects delivered by CPP. Reporting to the Executive General Manager - Engineering, this is a high-autonomy, consultative role for someone who wants real ownership over how OT cyber security is done at CPP — with the credibility to influence both technical teams and senior stakeholders. This is a standalone specialist role with both strategic and hands-on responsibility. You will set the direction and personally develop the frameworks, policies, risk assessment methodologies and practical tools needed to embed cyber security throughout the project lifecycle. Key Responsibilities • Act as CPP's OT cyber security Manager and primary point of contact for OT cyber security across project delivery. • Establish and maintain OT cyber security governance, standards and project delivery processes aligned to IEC 62443 and AESCSF. • Lead OT cyber risk assessments, project compliance documentation, supply-chain assurance and vendor evaluations. • Interpret customer cyber security requirements and contractual obligations, and translate these into practical project deliverables. • Develop OT cyber security architectures, standards and controls, including secure network design, zoning, segmentation and remote access, in collaboration with our SCADA engineering teams. • Review factory and site acceptance testing to verify cyber security controls are implemented and compliant. • Maintain audit-ready documentation, registers and evidence packs, and support incident response, patch management and change control processes. • Provide practical guidance to executives, project teams and stakeholders on cyber security obligations, risks and requirements. • Monitor emerging threats, industry developments and regulatory requirements relevant to CPP's role as an EPC contractor and service provider.