Is Your OT Security Job Description Really Three Jobs?

Read the brief as a working calendar

Take each responsibility and imagine where it sits in an ordinary month. Site travel consumes days. Change preparation requires uninterrupted work. A recurring incident response obligation can interrupt both. Budget planning and stakeholder meetings also take time, even when they appear as a single line near the end of the advertisement.

Ask the people doing the work today what happens when priorities collide. Who covers an investigation while this person is at another plant? Who continues a deployment when they are preparing for an audit? Who provides cover during leave? If the answer to every question is the new hire, the role needs more definition before you search.

A brief that asks for too much

A person may have relevant experience across all four areas. That does not give them four working weeks in one month. Breadth of knowledge helps someone coordinate the work, but coordination still requires other people with time and responsibility to carry out their part.

Choose the work that gets first call on their time

Imagine an employer whose immediate need is to deploy an approved monitoring approach at two facilities. The first hire could own the rollout, work with site engineers, document coverage, and establish the operating handover. Program strategy could remain with the existing security leader. An outside service could handle initial alert review under an agreed arrangement.

That is a position a candidate can understand. They know the main assignment, the people available to help, and where their responsibility ends. The same employer might later need a program manager as the work expands. Making the current job clear does not prevent the team from growing.

If the company genuinely needs one senior generalist, give that person a sequence. State which responsibilities begin immediately, which become important later, and what support will be added before the next stage. Include a review point when new sites or new obligations are introduced.

Separate experience from daily responsibility

An engineer may need enough incident response knowledge to support investigations without being the sole incident commander. An architect may need to understand audit requirements without personally gathering every evidence item. Describe why the knowledge matters and how it will be used. This makes essential requirements easier to distinguish from useful background.

NIST's NICE Framework allows a job to include several work roles or parts of them. That flexibility is useful when the allocation is explicit. For every major area in your brief, identify whether this person will lead it, perform a defined part of it, or advise someone else who owns delivery.

Let the revised brief change the search

Once the responsibilities are clear, revisit the experience requirements. You may no longer need every certification, every product, and a previous leadership title. You may need strong evidence of a particular kind of delivery, together with the judgment to work within your operating conditions.

Ask interviewers to use the same version of the role. Otherwise, the recruiter may describe an engineering position while the executive interviews for a program director and the plant expects emergency support. Agree on the first assignment, the support model, and the work that belongs elsewhere before the first candidate conversation.