ICS/OT Cyber Security Advisory Lead (Hybrid 50%)

Transport for London; Greater London; Hybride; GBP 90 000 - 130 000; Plein temps

Avantages offerts par ce poste

Final salary pension scheme

Free travel on TfL network

Hybrid working arrangement

Résumé du poste

Transport for London (TfL) seeks a Cyber Security Advisory Lead to guide a team of cyber security advisors across IT/OT environments. You will influence strategy, develop secure designs and support risk owners to reduce cyber risk for TfL’s critical transport networks across London.

Ideal candidates will have extensive cyber security experience, knowledge of ISO27001/NIST/NIS, and the ability to communicate complex risks to senior stakeholders.

Qualifications

• Degree level education or equivalent in science, engineering, tech or cyber security.
• Relevant certifications such as GIAC, ISC2, ISACA, ISA, CompTIA are desirable.
• Experience applying security by design and security in operation; BPSS/CTC clearance may be required.

Responsabilités

• Lead and line manage a team of cyber security advisors across a portfolio of projects.
• Build strong relationships with risk owners, project teams and system owners.
• Provide pragmatic cyber security guidance aligned to TfL standards and regulatory obligations.
• Sponsor and implement cyber security capabilities to improve resilience and security of technology systems.
• Governance: chair groups and support management reporting on KPIs/risks.

Connaissances

Stakeholder management

Verbal & written comms

Security design review

Risk analysis

Team leadership

Problem solving

Mentoring

Formation

Degree level education or equivalent

Description du poste

Transport for London (TfL) seeks a Cyber Security Advisory Lead to guide a team of cyber security advisors across IT/OT environments. You will influence strategy, develop secure designs and support risk owners to reduce cyber risk for TfL’s critical transport networks across London.

Ideal candidates will have extensive cyber security experience, knowledge of ISO27001/NIST/NIS, and the ability to communicate complex risks to senior stakeholders.