Cyber Security Engineer and Architect

Renewable Energy Systems; United Kingdom; On-site; GBP 90,000 - 150,000; Full time

Job summary

Renewable Energy Systems seeks a Global Cyber Architect to support the Director of Cyber Security in designing, configuring and protecting IT and OT systems against cyber threats. The role collaborates with service providers, internal teams and stakeholders to implement cyber security systems and processes for continuous operations.

Travel to RES sites will be required to maintain strong client relations. The role focuses on embedding cyber security into business practices and technology to

Qualifications

• Senior-level cyber architecture expertise across IT and OT environments.
• Ability to design, assess and endorse cyber security architectures and changes.
• Experience partnering with external suppliers and internal stakeholders.

Responsibilities

• Lead cyber architecture roadmaps, standards and patterns for IT/OT solutions.
• Act as lead design authority for cyber security architecture matters.
• Ensure material cyber change is endorsed by the Technical Design Authority.
• Oversee continual cyber technology improvements to enhance resilience and standardisation.
• Design and implement a cyber security management system for global accreditation.
• Coordinate cost optimization for OT architecture to align with business goals.
• Conduct cyber due diligence for client proposals and opportunities.
• Analyze threat intelligence and liaise with partners and agencies.
• Support incident response and recovery for IT/OT systems.
• Oversee penetration testing and remediation actions.
• Design cyber incident simulations to test response capabilities.
• Lead Cyber Health Check services for clients.
• Shape cyber strategy, standards and roadmaps across IT/OT teams.

Skills

Business mindset

Business acumen

Stakeholder engagement

Communication

Negotiation

Strategic thinking

Integrity and ethics

Tools

Architecture modelling tools

Job description

The position

The Global Cyber Architect will support the Director of Cyber Security in ensuring that the company’s Information Technology and Operational Technology (IT & OT) systems are optimally designed and configured as well as adequately protected from cyber threats so to ensure continuous and effective business operations. This role will work with Cyber Service Providers, internal support teams and key stakeholders to implement and operate cyber security systems and processes on behalf of the Director of Cyber Security and the Group CIO.

Ultimately, this role will support RES to continually adapt and enhanced its cyber security. Through the embedding of cyber security into business practices and technology, this role will support RES in becoming recognised as a market leader in the delivery of cyber security services within renewables.

The post-holder will be required to travel periodically to RES sites to establish and maintain excellent customer relations.

Key accountabilities

• Lead the production of cyber architecture roadmaps, standards and patterns to the support the successful delivery of IT and OT solutions and business objectives
• Act as the lead design authority for cyber security architecture matters through the production and review of solution proposals
• Working closely with the Global Lead Architect to ensure all material cyber related technology change is assessed and endorsed by the Technical Design Authority (TDA)
• Oversee the delivery of activities within a continuous programme of cyber technology improvements focused on enhancing the resilience, standardisation and reliability of the RES technology environments
• Lead the technical design and implementation of a ‘cyber security management system’ to underpin getting and maintaining a global cyber accreditation
• Ensure cost optimization practices are applied to ‘AS-IS’ and ‘TO-BE’ OT cyber architecture solutions to maximize the benefits returned from IT and OT technology in line with business objectives
• Undertake cyber related technical due diligence for business proposals offered to clients
• Assist in the gathering, analyzing of threat intelligence and learning from security partners, industry peers and government agencies to understand potential and relevant impacts to RES
• Support incident response and recovery activities in relation to IT and OT systems in close liaison with the Cyber Security colleagues
• Oversee security penetration testing of IT and OT systems to ensure the effective management and remediation of any resulting improvement actions
• Assisting in the designing of cyber incident simulation scenarios to ensure response and recovery capabilities are routinely tested and adapted as required
• Lead on the technical design of Cyber ‘Health Check’ services to be provided to clients
• Shape and gain buy in to the cyber strategy and supporting standards, roadmaps and patterns across the OT and IT teams and business stakeholders

Line Management

Direct supervision of 3rd parties’ suppliers in the delivery and execution of cyber services

Knowledge

• Extensive knowledge of cyber security in relation to IT & OT systems and infrastructure
• Extensive knowledge of good practice enterprise level of design, implementation and operation of IT & OT environments and
• Knowledge of technology governance processes covering financial management, project management, compliance and IT risk management.
• Excellent Knowledge and experience of Cyber Architecture (spanning Enterprise, Information, Technical, Application, People & Process)
• Solid understanding of managing and partnering with 3rd party cyber security suppliers.
• Deep understanding of Cyber security principles, frameworks and standards e.g. ISO27001, NERC-CIP and NIST-CSF

Skills

• A ‘business outcome’ approach and style to delivering technology change
• Strong Business Acumen and collaborative in approach
• Proven ability to engage, build strong relationships, influence and partner with stakeholders across functions and geographies.
• Credible and capable; able to quickly build the confidence in senior managers and peers
• Passionate about technology and how it can improve the customer experience.
• Excellent negotiation and resolution skills - A capable negotiator, both internally and with third parties.
• An ability to shape direction and translate strategy into action.
• An individual of integrity who will respect and demonstrate RES values. Sensitive and intuitive, whilst displaying gravitas and credibility

Experience

• Extensive experience and track record working in Cyber Security and Architecture
• A highly capable, all round technologist, preferably in the B2B sector, with experience of change and transformation.
• Experienced gained in the Construction, Utilities or a project based business
• Accustomed to dealing with senior managers and exceptionally customer focused.
• Demonstrated deep knowledge of technical/Infrastructure architectures and standards
• Experience of architecting and auditing leading cyber security technologies such as firewalls, vulnerability scanners and authentication services
• Experience of using architecture modeling tools and practices
• Delivery of cyber security solution to remediation business risk and external threats

Desirable

• Accreditation or certification relating architecting, deploying and securing enterprise cloud platforms including Azure, AWS and Google
• Accreditation to ITIL foundations
• COBIT or equivalent, CISSP or equivalent

At RES we celebrate difference as we know it makes our company a great place to work. Encouraging applicants with different backgrounds, ideas and points of view, we create teams who work together to solve complex problems and design practical solutions for our clients. Our multiple perspectives come from many sources including the diverse ethnicity, culture, gender, nationality, age, sex, sexual orientation, gender identity and expression, disability, marital status, parental status, education, social background and life experience of our people.