Cyber Security Engineer

Tiger Resourcing Group; Redhill; On-site; GBP 80,000 - 110,000; Full time

Job summary

Tiger Resourcing Group is seeking an experienced information security professional to support RCC Handover with oversight of access controls, cryptographic keys, and security tool management. The role includes knowledge transfer to successor operators and ensuring security controls remain robust through handover activities.

You will lead change boards, document security tooling updates, perform vulnerability monitoring, and ensure compliance with ISO 27001, PCI-DSS, GDPR, and related standards

Qualifications

• Experience establishing security architecture and policies.
• Strong knowledge of enterprise security management processes and infrastructure.
• Familiarity with PCI-DSS, ISO 27001, UK GDPR compliance.

Responsibilities

• Lead security architecture initiatives and governance across RCC Handover.
• Define and document technical changes in security tooling to support RCC Handover.
• Assess change requests for impact on security controls and monitor risks.
• Create and maintain technical documentation for security tools and information assets.
• Provide reporting to RCC Handback leadership and coordinate with customer teams.

Skills

Security architecture

Security governance

Vulnerability management

Threat monitoring

Security tooling

ISO 27001

Education

IISP

CISA

CISM

CISSP

CCSP

ISA

University degree in Computer Science/Math/Engineering/Natural Sciences

CIPP/E

CIPM

CREST-registered penetration tester and/or security architect

ITIL v3/PRINCE2 Foundation/TOGAF

Security or networking vendor certifications

Tools

Splunk

CrowdStrike

Qualys

Trellix

Cisco IPS

F5

Centrify

Job description

Redhill, United Kingdom

Supports the handover of existing security tools, including oversightand management of access control, technical management of security materialssuch as cryptographic keys, passwords and certificates, as well as additionalsecurity monitoring, vulnerability management, tool maintenance andconfiguration.

The role will also provide knowledge transfer and training to thesuccessor operator’s security architecture staff.

Essential Job Duties and Responsibilities

• Ensure RCC Handover project objectivesare supported by appropriate cybersecurity requirements.
• Define, document and perform technicalchanges in security tooling to support RCC Handover.
• Lead cybersecurity assurance within RCCHandover change boards and design gateways.
• Ensure appropriate security supportprocesses are followed by the RCC Handover team.
• Ensure the customer and successoroperator understand the technical impact of RCC Handover tasks.
• Provide input into other cybersecurity,contingency planning and related RCC Handback activities.
• Create and update technical documentationfor security tools, processes and information assets as directed by theRCC Handover leadership team.
• Assess RCC Handover change controlrequests for potential impact on existing security mechanisms and ensureany potential compromise or weakening of security controls is minimised.
• Perform security monitoring andvulnerability management of information assets in scope of RCC Handovertasks, supporting existing business-as-usual teams.
• Perform handover of security secretmaterials, including cryptographic keys and certificates, devices andaccess control credentials to the customer and/or successor operator.
• Provide reporting to the RCC Handbackleadership team.
• May be required to work across customer,TfL, successor operator sites and data centres.
• Comply with all relevant company policiesand procedures, including standards relating to conduct, quality,security, occupational health, safety and environmental requirements.
• Perform any other reasonable dutiesassigned by the manager from time to time.

Qualifications

• Certification as an Information Securityprofessional, for example:
• IISP
• CISA
• CISM
• CISSP
• CCSP
• ISA
• University degree in a numerate subjectsuch as Computer Science, Mathematics, Engineering or Natural Sciences.
• Information privacy/data protectioncertifications such as CIPP/E and CIPM.
• CREST-registered penetration testerand/or security architect.
• ITIL v3, PRINCE2 Foundation and/or TOGAF.
• Security, IT infrastructure or networkingvendor certifications.

Skills, Experience and Knowledge

• Strong experience taking a leading rolein the establishment and implementation of security architecture, policiesand procedures.
• Good understanding of enterprise-scalesecurity management processes and infrastructure.
• Experience working with current ITsecurity standards and regulations such as PCI-DSS, ISO 27001 and UK dataprotection legislation.
• In-depth understanding of informationsecurity control tools, for example:
• SplunkCloud
• CrowdStrike
• Qualys
• Trellix
• CiscoIPS
• F5
• Centrify
• Experience working with enterprise ITinfrastructure and technologies such as Microsoft Windows Server, Ciscoand Linux.
• Experience within transactional revenue,embedded systems, smartcards and mobile payment systems.
• Knowledge or experience of securityarchitecture across major public cloud services such as:
• AmazonWeb Services
• GoogleCloud
• CloudAccess Security Brokers
• Knowledge of cryptographic services,products and HSM devices.
• Knowledge of wider security, audit, riskand compliance standards including:
• PCI-P2PE
• PCI-POI-PTS
• ISO27701
• ISO27005
• ISO31000
• NIST
• GDPR
• Governance,Risk and Compliance tools
• Experience with quality managementsystems and external audit standards such as ISO 9001.