Cyber Security Advisory Lead - ICS/SCADA/OT

Transport for London; Greater London; Hybride; GBP 90 000 - 130 000; Plein temps

Avantages offerts par ce poste

Final salary pension scheme

Free travel on TfL network

Hybrid working arrangement

Résumé du poste

Transport for London (TfL) seeks a Cyber Security Advisory Lead to guide a team of cyber security advisors across IT/OT environments. You will influence strategy, develop secure designs and support risk owners to reduce cyber risk for TfL’s critical transport networks across London.

Ideal candidates will have extensive cyber security experience, knowledge of ISO27001/NIST/NIS, and the ability to communicate complex risks to senior stakeholders.

Qualifications

• Degree level education or equivalent in science, engineering, tech or cyber security.
• Relevant certifications such as GIAC, ISC2, ISACA, ISA, CompTIA are desirable.
• Experience applying security by design and security in operation; BPSS/CTC clearance may be required.

Responsabilités

• Lead and line manage a team of cyber security advisors across a portfolio of projects.
• Build strong relationships with risk owners, project teams and system owners.
• Provide pragmatic cyber security guidance aligned to TfL standards and regulatory obligations.
• Sponsor and implement cyber security capabilities to improve resilience and security of technology systems.
• Governance: chair groups and support management reporting on KPIs/risks.

Connaissances

Stakeholder management

Verbal & written comms

Security design review

Risk analysis

Team leadership

Problem solving

Mentoring

Formation

Degree level education or equivalent

Description du poste

Cyber Security Advisory Lead - IC…

Job Title: Cyber Security Advisory Lead – IC/SCADA/OT

Contract Type: Permanent / Full time

Location: North Greenwich, Pier Walk / remote working 50% office Attendance

Advert Closes: Sunday 25th October 2026 at 23.59

UK Sponsorship not available for this position

You will influence the lives of millions

At TfL, we operate one of the busiest metro systems in the world, with 5 million people using the underground daily. Join us, and you will be amongst the leading engineers, architects and consultants responsible for making TfL world famous, from our London Underground covering 272 stations, or our red bus fleet of 9300 vehicles, TfL remains a key part of the Capital’s success.

TfL’s cyber security professionals play a critical and ever-increasing role in protecting these services and the online systems that make it all work, safeguarding our customers as they travel across the capital’s network, and ultimately helping to realise the Government’s ambition to make the UK the safest place in the world to be online and do business.

Our cyber security advisors provide specialist support to the organisation, influencing top-level strategy all the way through to the architectural designs to protect TfL assets and reduce the likelihood and impact of a cyber security incident.

We are looking for a team lead to lead and line manage a team of cyber security advisors who are responsible for working with a variety of stakeholders and groups, providing specialist Industrial Control Systems/Operational Technology (ICS/OT) cyber security advice and guidance, supporting the organisation to align with organisational policies, standards and good practice. The ability to build relationships and manage multiple stakeholders is essential in this role. We’re looking for a great communicator, able to make the complex understandable for a wide range of stakeholders.

As a cyber security advisory lead, you will ideally have relevant skills and experience working in cyber security using best practices (e.g., ISO27001, NIST Cyber Security Framework, NIS Regulations) and/or experience working in Infrastructure (IT/OT) or Cloud environments with cyber security responsibilities and be able to apply these to real world systems. Your advisory and management experience will enable you to work collaboratively with business stakeholders to build or procure secure systems that minimise TfL’s cyber risk exposure and meets regulatory obligations (e.g. NIS Regulations).

Prior experience in cyber security is required and experience with Industrial Control Systems/Operational Technology would be advantageous.

This role has line management responsibilities therefore prior experience leading and managing a team would be advantageous. At this time line management responsibilities will be for two cyber security advisors, however this is intended to grow over time.

Key Accountabilities

• Lead and line manage a team of cyber security advisors who are responsible for working with a variety of stakeholders and groups including project teams, system owners and the wider cyber security team providing pragmatic cyber security advice and guidance and a range of cyber security services and activities.
• Ensure strong and strategic relationships exist between the cyber security team and key stakeholders including risk owners, project teams and system owners.
• Ensure that risk owners, and their delegates, have access to appropriate and high quality cyber security advice, enabling them to make informed decisions to support the objective of mitigating cyber security risk at TfL.
• Support risk owners in ensuring that cyber security controls are identified and implemented, in line with the standards set for new and existing systems and solutions, both those internally developed and those procured from our supply chain.
• Sponsor, facilitate, support and/or implement cyber security capabilities and improvements to the security and resiliency of technology systems.
• Oversee and undertake the continuous development and improvement of internal and external cyber security processes.
• Oversee and support continuous professional development of your team.
• Prepare, present and/or support reports on the current status of cyber security assurance, deliverables, risks, KPIs/KRIs.
• Quality assure the work delivered by members of the cyber security advisory team in accordance to TfL standards and best practice, providing guidance and feedback as needed.
• Manage the delivery of support to a portfolio of cyber security projects, services and activities across a number of business areas.
• Act as the cyber security single point of contact for escalations for particular areas of the business.
• Chair, facilitate and contribute to technology and cyber security governance groups and approval bodies.

Knowledge in

• cyber security and information security practices, principles, tools and techniques.
• telecommunications and IP networking.
• network and computer system architecture, operations and protocols.
• network infrastructure, system and application architecture and associated cyber security controls.
• enterprise-level cyber security technologies for use in complex environments.
• information security management concepts to support solutions and processes.
• industry good practice and frameworks such as: ISO27001, IEC62443, NIST Cyber Security Framework, CIS Critical Security Controls.
• relevant legislation and regulation such as: Data Protection Act (DPA), Network and Information Systems (NIS) Regulation, Payment Card Industry Data Security Standard (PCI DSS).

Skills in

• relationship and stakeholder management, including excellent interpersonal and influencing skills. Relevant stakeholders may include all levels including senior executives.
• highly effective verbal and written communications, particularly the ability to readily translate technical risks into business language.
• the ability to review and influence technology and engineering designs at a high level.
• the ability to analyse and recommend cyber security requirements and controls.
• the ability to lead a team across a varied portfolio of work.
• excellent analytical and problem solving, using a pragmatic approach.
• maintaining a constructive approach to developing and mentoring team members.

Experience in

• communicating, engaging and influencing a variety of junior and senior stakeholders
• developing, coaching and mentoring team members.
• engaging with major internal and external parties to achieve business objectives.
• working with engineering / operational technology, such as industrial control systems, particularly those related to safety critical / critical national infrastructure functions.
• applying security by design and security in operation.
• providing cyber security advice and guidance.

Qualifications

Desirable Qualifications

• Degree level education or equivalent experience, ideally in science, engineering, technology, computing, cyber security or a related field.
• Qualifications and certifications from information security bodies such as: GIAC, ISC2, ISACA, ISA, CompTIA.

Security Clearance

This role requires a minimum of BPSS and CTC security clearance, however the required level of clearance may change. Should an offer of employment be made, continued employment is subject to you obtaining the required level of clearance and maintaining this throughout your employment.

Excellent Benefits include

• Final salary pension scheme
• Free travel for you on the TfL network
• Reimbursement of 75% of the cost of a standard class Ticket for National Rail travel from home or 75% reimbursement on a 28-day flexi ticket
• 30 days annual leave plus public and bank holidays
• TfL is committed to work-life balance, operating a hybrid working approach where business and role requirements allow
• Tax-efficient cycle-to-work programme
• Retail, health, leisure and travel offers
• Discounted Eurostar travel and much more!

Equality, diversity and inclusion

We are committed to equality, diversity and inclusion and aim to reflect the diverse communities we serve. We believe that a diverse workforce enables us to deliver better services and outcomes. Our goal is to make our recruitment as inclusive as possible.As aDisability Confident Leader,we actively encourage applications from disabled people. Aspart of the Disability Confident scheme, we aimtooffer an assessmentorinterviewtocandidates who apply via the scheme where the minimumessentialcriteria for skills, knowledge and experiencehasbeen met.In some circumstances, it may not be practical to offer an interview or assessment to every candidate whoapplies through the scheme and meet the minimum essential criteria; in these situations, we select candidates who best meet the minimum criteria for the job rather than interviewing all who meet them.

Across all recruitment activity, we recognise that selection methods may vary depending on the nature and scale of the campaign and will be applied fairly,consistentlyand proportionately in line with ourDisability Confident commitments.

Many of our staff work flexibly in many different ways. Please talk to us at interview about the flexibility you need. We'll see what we can do.

We understand a confidence gap can get in the way of meeting spectacular candidates. So please don’t hesitate to apply if you think you have what it takes even if you feel you don’t meet all the criteria. We’d love to hear from you.

At Transport for London, safety, trust and fairness sit at the heart of how we recruit. Our Vetting Charter ( https://tfl.gov.uk/corporate/careers/our-vetting-process ) explains the checks we carry out before you join us, helping ensure we create a safe, inclusive and reliable network for everyone who depends on our services. We simply ask that the information you provide is honest and accurate so we can progress your application smoothly. If something doesn’t match or can’t be verified, we may not be able to move forward with your application but we’ll always treat you with transparency, respect and clear communication throughout.