Operational Technology Risk Manager

MBDA; Stevenage; Hybrid; GBP 60,000; Full time

Job summary

A leading defense organization in the UK seeks an OT Risk Manager to ensure security for General Infrastructure Management Systems. The role involves creating a risk management framework, advising on installations, and providing technical security consultancy. Candidates should have a CISSP or equivalent and strong experience in network security. The position offers dynamic working and a bonus of up to 21% of the salary, along with various benefits including a pension plan and flexible working arrangements.

Benefits

Company Bonus up to 21%

Pension contribution up to 14%

Flexible working arrangements

Enhanced parental leave

Subsidised meals

Healthcare Cash Plan

Qualifications

• CISSP, InfoSec/Cyber Degree or equivalent required.
• Experience in network security or industrial control system hardening is essential.
• Familiarity with ICS/SCADA/BMS/BEMS security is necessary.

Responsibilities

• Create and maintain a risk management framework for infrastructure.
• Provide advice on GIMS installations and changes.
• Deliver technical security consultancy including architecture suitability.

Skills

CISSP

Network security or industrial control system hardening

Knowledge of ICS/SCADA/BMS/BEMS

IT network architectures

Risk balanced security solutions

Managing inexperienced IT/FM Engineers

Security risk management

Education

CISSP, InfoSec/Cyber Degree or equivalent

Job description

We have an opportunity working on behalf of UK Facilities Management, the Operational Technology (OT) Risk Manager will act as the deployed local security leader and expert in all elements of security for General Infrastructure Management Systems (GIMS) policy.

Salary

Circa £60,000 depending on experience

Dynamic (hybrid) working

3-4 days per week on-site due to workload classification and frequent travel to all sites across the UK

Security Clearance

British Citizen or a Dual UK national with British citizenship/Restrictions and/or limitations relating to nationality and/or rights to work may apply. As a minimum and after offer stage, all successful candidates will need to undergo HMG Basic Personnel Security Standard checks (BPSS), which are managed by the MBDA Personnel Security Team.

What we can offer you

• Company Bonus: Bonus of up to 21% of base salary

• Pension: maximum total (employer and employee) contribution of up to 14%

• Flexible working: We welcome applicants who are looking for flexible working arrangements

• Enhanced parental leave: offers up to 26 weeks for maternity, adoption and shared parental leave -enhancements are available for paternity leave, neonatal leave and fertility testing and treatments

• Facilities: Fantastic site facilities including subsidised meals, free car parking and much more…

• Healthcare Cash Plan: The Healthcare Cash Plan benefit provides the option to claim cash back on everyday healthcare expenses such as optical, dental, health and wellbeing and more.

The opportunity

The main focus is the creation, execution and maintenance of a framework to identify and address risks associated with the devices which support MBDA’s Building and Infrastructure across the UK. This will also include input into the wider group structures as and when required. The OT Risk Manager will act as the point of contact for all new, existing and legacy GIMS installations, providing advice, guidance and direction to address the multiple security risks associated with them. This includes liaising with cross business teams outside of FM, such as Cyber and InfoSec, IM and Product Cyber. The OT Risk Manager will oversee all change management activities related to the connectivity and digital interfaces of the relevant infrastructure, ensuring all change remains appropriate and complaint with policy; ensuring an evidenced position is constantly maintained by MBDA UK of continued compliance with all relevant standards which may be subject no-notice audits by MBDA Group, MOD and other customers. They will deliver technical security consultancy to the business including architecture and solution suitability to meet a complex suite of business requirements. They will create and update ISO 27001 compliant policies to specifically address the GIMS policy ensuring that all policies, processes, procedures and technical infrastructure remains compliant with MBDA UKs wider ISO 27001 ISMS as well as other certifications as appropriate.

The OT Risk Manager will be a critical leader in any new infrastructure projects within MBDA UK and for reducing cyber risk to the business as part of a wider team. The OT Risk Manager will also coordinate all technical security testing within their allocated area of operations, as well as maintaining upward reporting to MBDA UK FM Director, UK Security Director and UK CISO on results and remediation progressions. They will proactively coordinate with the Principle Cyber and Information Security Advisor for all required assurance activity and evidence based reporting. They will work with FM and wider business stakeholders to create a network of Asset Owners and formally document the asset registers for their areas of operation.

What we’re looking for from you

• CISSP, InfoSec/Cyber Degree or equivalent (Essential)

• Experience or relevant certifications in network security or industrial control system hardening (Essential)

• Knowledge of security surrounding systems enabling critical services within business (ICS/SCADA/BMS/BEMS)

• Comfortable with establishing and maintaining relationships with national security authorities, internal stakeholders and industry partners.

• Expert in security concepts for IT network architectures, applications, cloud services and hardening of operating systems withinICS and SCADA context.

• Ability to present risk balanced security solutions to complex problems and provide clear advice directly to key stakeholders at all levels

• Experience of managing and developing inexperienced IT/FM Engineers to maintain security

• Experience of system accreditation processes and documentation.

• Experience of security risk management

• Knowledge of business IT processes and associated approval systems

• Expert knowledge of modern hacking Tactics, Techniques and Procedures including impacts affecting GIMS/ICS/SCADA.

Our company: Peace is not a given, Freedom is not a given, Sovereignty is not a given

MBDA is a leading defence organisation. We are proud of the role we play in supporting the Armed Forces who protect our nations. We partner with governments to work together towards a common goal, defending our freedom.

We are proud of our employee-led networks, examples include: Gender Equality, Pride, Menopause Matters, Parents and Carers, Armed Forces, Ethnic Diversity, Neurodiversity, Disability and more…

We recognise that everyone is unique, and we encourage you to speak to us should you require any advice, support or adjustments throughout our recruitment process.

Follow us on LinkedIn (MBDA), X (@MBDA_UK), Instagram (MBDA_UK) and Glassdoor or visit our MBDA Careers website for more information.