Cyber Security Design Authority

Thales; Crawley; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

A global technology leader is seeking a Business Unit Cyber Security Design Authority in Crawley, UK. This role involves acting as the Cyber Design Authority, ensuring cyber governance, and assessing cybersecurity measures. The ideal candidate has over 5 years of experience in cybersecurity and holds an engineering degree. The role allows hybrid working with required travel to various sites.

Qualifications

• 5+ years in senior Cyber Security Engineering roles.
• Experience guiding projects through security risks.
• Familiarity with cybersecurity in OT, IOT, embedded environments.

Responsibilities

• Act as Cyber Design Authority across the Business Line Programme.
• Ensure adherence to Cyber Engineering Governance.
• Support cybersecurity maturity development.
• Assess cybersecurity aspects of products and solutions.
• Provide guidance on Policies & Standards.

Skills

Multi-stakeholder influence

Threat and vulnerability assessment

Guiding teams through assurance processes

Secure by design approach

Understanding cybersecurity technologies

Articulating cybersecurity vs. cyber resilience

Education

Engineering degree or equivalent

Job description

Overview

Location: Crawley, United Kingdom

Thales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billions of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify identities, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure. This role is based in Thales UK with flexibility for hybrid working where possible.

Together we offer fantastic opportunities for committed employees to learn and develop their career with us. At Thales UK, we research, develop, and supply technology and services that impact the lives of millions of people each day to make life better and keep us safer. We innovate across Aerospace, Defence, Security and Space. Your health and well-being matters to us and we support a working pattern that suits your lifestyle where possible.

Title and Location

Title: Business Unit Cyber Security Design Authority

Location: The ideal location would be Crawley, although other Thales sites might be considered for the right applicant. Regular travel to Crawley is required. Hybrid approach to office and remote working. Approximately 40% remote with flexibility to travel to various Thales and customer facilities/locations.

Core Terms of Reference (ToR)

List core activities here that the role will be required to conduct & deliver.

• Act in capacity as the Cyber Design Authority (DA) across the Thales Business Line (BL) Programme covering Core, Low & High team activities, services & deliverables with a direct reporting line to the UK Chief Product Security Officer and BL Technical Director.
• Ensure adherence to and intelligent application of Thales UK Cyber Engineering Governance and processes across all BL activities.
• Support cybersecurity maturity development of BL, including cybersecurity knowledge transfer and upskilling to senior BL staff.
• Assess and assure cybersecurity aspects of products and solutions through life. This includes, but is no limited to, assessing key cybersecurity approach, the cyber engineering artefacts and the overall security case.
• Provide guidance on the applicable Policies & Standards required for the relevant industrial applications.
• Evaluation and guidance for technology selection and the impact to security / cyber risks.

Key Skills

List key skills required for the role:

• Able to operate in multi-stakeholder environments with the ability to influence to ensure right outcomes are reached.
• Able to select and follow structured processes to identify threats, vulnerabilities, assess exposure and identify & mitigate security risks.
• Ability to guide teams to take systems through formal assurance and acceptance including working with customer organisations and 3rd parties.
• Ability to apply secure by design approach through engineering lifecycle and in service.
• Ability to understand where and how key cybersecurity technologies are applied, the fundamentals behind the technology and the ability to assess suitability of candidate products.
• Ability to articulate (and distinguish between) cyber security and cyber resilience approaches.

Experience

• 5 years + in senior Cyber Security Engineering roles.
• Proven experience of guiding complex projects through security risks and mitigation activities.
• Working with external partners and accreditation bodies.
• Experience of applying cybersecurity to OT, IOT and/or embedded environments.

Qualifications

• Engineering degree or equivalent in an appropriate field.

Desirable

• CISSP Accreditation
• CCP Architect
• SABSA Chartered Security Arch - Foundation & Practitioner
• IEng/CEng

Behaviours & Motivation/Aptitude

• Enthusiastic about the way in which Cybersecurity & Trust will make the world a safer place.
• Possess a desire to expand knowledge and continually acquire new knowledge & skills required for the job & personal growth.
• Connects at a deep level with others; is a trusted adviser to top stakeholders; develops and maintains a network of influential players in the industry critical to Thales's future success.
• Makes timely, high-impact, high-quality decisions in uncertain and ambiguous contexts; sees these through to completion.

Security Clearance

This role will require SC Clearance. It would be advantageous if currently held; however, if not currently held, the successful applicant will need to undergo, achieve, and maintain SC Clearance. Please visit the UKSV website for further guidance.

To be eligible for full SC, you generally need to have resided in the UK for the last 5 years. In some circumstances, a minimum of 3 years' residence in the UK over the last 5 years may be accepted, with additional overseas checks.

For further details of the evidence required to apply for Baseline and Security Clearance please refer to the National Security Vetting (NSV) Agency - United Kingdom Security Vetting - GOV.UK (www.gov.uk).

#LI-VJ1

Additional Information

In line with Thales' Baseline Security requirements, candidates will be asked to provide evidence of identity, eligibility to work in the UK and employment and/or education history for up to three years. Some vacancies may require full Security Clearance which can require further evidence to be provided. For further details of the evidence required to apply for Baseline and Security Clearance please refer to the Defence Business Services National Security Vetting (DBS NSV) Agency.

At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working.

Thales UK is committed to providing an inclusive and barrier-free recruitment process. We will provide reasonable adjustments and support to ensure neuro-diverse applicants or those with a disability or long-term condition can be their best during the recruitment process. To request an adjustment, if you need this job advert in an alternative format or if you have any questions about the recruitment process, please contact Resourcing Ops for mid to senior roles, or the Early Careers Team for graduate and apprentice roles.

Great journeys start here, apply now!