Cyber Security IT Advisory Team Lead

Transport for London; City Of London; On-site; GBP 75,000 - 83,000; Full time

Benefits offered by this job

Final salary pension scheme

Free travel on TfL network

Private healthcare discounted scheme

Cycle-to-work programme

Rail travel discounts

30 days annual leave

Job summary

Transport for London is seeking a senior Cyber Security Lead to shape and direct the cyber security advisory function from our North Greenwich office. You will lead a team, partner with senior stakeholders, and drive improvements across the organisation to protect critical transport systems.

You will apply ISO27001, NIST, GDPR, and PCI DSS concepts, review designs, report KPIs, and chair governance groups. This role requires proven leadership, strategic thinking and the ability to translate

Qualifications

• Proven leader with experience in prioritisation and resource management in a high demand environment.
• Passionate about continuous improvement and driving organisational change.
• Proactive problem solver with innovation and critical thinking.
• Delivery focus with KPI/KRIs reporting and alignment to strategy.
• Collaborative approach with internal and external stakeholders.
• Excellent written and verbal communication for senior audiences.
• Experience applying information security concepts and governance.
• Knowledge of ISO27001, GDPR, NIST CSF, PCI DSS and related controls.

Responsibilities

• Day-to-day management of a team of Cyber Security Advisors.
• Advise and guide the team and wider organisation as a cyber security SME.
• Build relationships between cyber security and internal/external stakeholders.
• Provide risk owners with cyber security advice to mitigate risk.
• Identify and implement cyber security controls in line with standards.
• Continuously improve cyber security processes and procedures.
• Support professional development of the team.
• Prepare and present reports on status, deliverables, risks and KPIs/KRIs.
• Quality assure the work delivered by team members.
• Manage delivery of cyber security projects across business areas.
• Chair and contribute to governance groups.

Skills

Leadership

Prioritisation

Resource management

Continuous improvement

Problem solving

Stakeholder management

Communication

Team development

Security principles

Cloud & network security

Education

Degree level education

GIAC

ISC2

ISACA

Job description

Salary: £75,000 - 83,000 plus fantastic benefits

Location: North Greenwich, London

Job Type: Permanent

Ad closes: Sunday 22nd November 2026 at 23.59

UK Sponsorship not available for this role

Job Purpose:

You will influence the lives of millions. At TfL, we operate one of the busiest metro systems in the world, with 5 million people using the underground daily. Join us, and you will be amongst the leading engineers, architects and consultants responsible for ensuring the continued operation of TfL, from our London Underground covering 272 stations to our red bus fleet of 9300 vehicles. TfL's cyber security professionals play a critical and ever-increasing role in protecting these services and the online systems that make it all work - safeguarding our customers as they travel across the London's transport network and helping to realise the Government's ambition to make the UK the safest place in the world to be online and do business. TfL remains a key part of the Capital's success.

Core Responsibilities:

• Day-to-day management of a team of Cyber Security Advisors.
• Advise and guide the team, and wider organisation, as a cyber security Subject Matter Expert.
• Build and maintain strong relationships between the cyber security team and key internal and external stakeholders.
• Provide risk owners with appropriate cyber security advice, enabling them to make informed decisions and mitigate cyber security risk at TfL.
• Support risk owners in the identification and implementation of cyber security controls, in line with organisational standards and best practices.
• Undertake the continuous improvement of cyber security processes and procedures.
• Support professional development of your team.
• Prepare and present reports on the status of cyber security assurance, deliverables, risks and KPIs/KRIs.
• Quality assure the work delivered by members of the Cyber Security Advisory Team, providing guidance and feedback, as needed.
• Manage the delivery of a portfolio of cyber security projects, services and activities across a number of business areas.
• Chair, facilitate and contribute to technology and cyber security governance groups.

Required knowledge, skills and experience:

• Proven leader with experience in prioritisation and resource management in a high demand environment.
• Passionate about continuous improvement and driving departmental/organisational change.
• Proactive problem solver, with a talent for innovation and critical thinking.
• Results orientated with a background in alignment of team goals and objectives to strategic direction and demonstration of delivery through reporting/KPIs.
• Favours a collaborative approach and builds strong relationships with internal and external stakeholders.
• Excellent written and verbal communication - Comfortable tailoring information/reporting to the audience and engaging with senior stakeholders.
• Ability to build capability - developing, coaching and mentoring team members.
• Experience in the application of information security principles, tools and techniques.
• Working knowledge of network and cloud security requirements and controls.
• Delivered complex cyber security improvement initiatives involving enterprise-level technologies.
• Confident to review and advise on technology design documentation at a high level.
• Detailed knowledge of information security, data privacy and risk management concepts, frameworks and best practices, such as ISO27001, IEC62443, NIST Cyber Security Framework, CIS Critical Security Controls, General Data Protection Regulation (GDPR) and Payment Card Industry Data Security Standard (PCI DSS).

Desirable Qualifications:

Degree level education or equivalent experience, ideally in science, engineering, technology, computing, cyber security or a related field.

Qualifications and certifications from information security bodies such as: GIAC, ISC2, ISACA, ISA, CompTIA.

Excellent Benefits include:

• Final salary pension scheme
• Free travel for you on the TfL network
• Reimbursement of 75% of the cost of a standard class Ticket for National Rail travel from home or 75% reimbursement on a 28-day flexi ticket
• 30 days annual leave plus public and bank holidaysTfL is committed to work-life balance, operating a hybrid working approach where business and role requirements allow
• Private healthcare discounted scheme (optional)
• Tax-efficient cycle-to-work programme
• Retail, health, leisure and travel offers
• Discounted Eurostar travel and much more!

Equality, diversity and inclusion

We are committed to equality, diversity and inclusion and aim to reflect the diverse communities we serve. We believe that a diverse workforce enables us to deliver better services and outcomes. Our goal is to make our recruitment as inclusive as possible. As a Disability Confident Leader, we actively encourage applications from disabled people. As part of the Disability Confident scheme, we aim to offer an assessment or interview to candidates who apply via the scheme where the minimum essential criteria for skills, knowledge and experience has been met. In some circumstances, it may not be practical to offer an interview or assessment to every candidate who applies through the scheme and meet the minimum essential criteria; in these situations, we select candidates who best meet the minimum criteria for the job rather than interviewing all who meet them.

Across all recruitment activity, we recognise that selection methods may vary depending on the nature and scale of the campaign and will be applied fairly, consistently and proportionately in line with our Disability Confident commitments.

Many of our staff work flexibly in many different ways. Please talk to us at interview about the flexibility you need. We'll see what we can do.

Additional Information

At Transport for London, safety, trust and fairness sit at the heart of how we recruit. Our Vetting Charter (https://tfl.gov.uk/corporate/careers/our-vetting-process) explains the checks we carry out before you join us, helping ensure we create a safe, inclusive and reliable network for everyone who depends on our services. We simply ask that the information you provide is honest and accurate so we can progress your application smoothly. If something doesn't match or can't be verified, we may not be able to move forward with your application but we'll always treat you with transparency, respect and clear communication throughout.