Power Systems Engineer – OT Cyber Security & Risk

Astute People Inc; Thundersley; On-site; GBP 45,000 - 65,000; Full time

Benefits offered by this job

Discretionary bonus 10%

Employer pension up to 11%

Private medical insurance

Life assurance

Income protection

35 days holiday

Job summary

Astute People is recruiting a Systems Engineer for a Gas Fired Power Station in Essex. The role focuses on strengthening system security and resilience of the plant’s Control and Information Systems, reporting to the Engineering Manager and liaising with the Cyber Security Manager.

Key duties include risk-based lifecycle analysis, updating cyber security policies, conducting audits, and supporting incident response and RCA investigations.

Qualifications

• Experience in cyber security within process industries and power facilities.
• Understanding of risk assessment, audits and incident response.
• Knowledge of ISA/IEC 62443 standards and HSE requirements.

Responsibilities

• Manage risk through lifecycle analysis of systems and identify mitigations for cyber threats.
• Maintain and update system cyber security policies and procedures.
• Conduct regular risk assessments, audits and testing to identify vulnerabilities and document improvements.
• Support incident response and investigations into security breaches with the Cyber Security Manager.
• Coordinate Management of Change activities and engineering risk assessments including RCA investigations.
• Manage control and information systems architecture and software and support Engineering Department initiatives.

Skills

Cyber security

Risk management

Policy updating

Incident response

ISA/IEC 62443

Education

HNC in C&I eng

Job description

Astute People is recruiting a Systems Engineer for a Gas Fired Power Station in Essex. The role focuses on strengthening system security and resilience of the plant’s Control and Information Systems, reporting to the Engineering Manager and liaising with the Cyber Security Manager.

Key duties include risk-based lifecycle analysis, updating cyber security policies, conducting audits, and supporting incident response and RCA investigations.