Information Security Consultant
il y a 10 jours
Manchester
Location: Remote - Limited on site - SC Clearance Salary: Up to £82,500 + Bonus + 10% Pension A leading engineering and technology organisation within the energy sector is seeking a Cybersecurity Technical Lead to support the delivery of secure, resilient solutions across critical infrastructure projects. This role plays a key part in strengthening the security of systems that underpin the UK’s energy network, contributing to a more intelligent and sustainable future. Key Responsibilities • Provide expert cybersecurity guidance to project teams across engineering, development, and service delivery, ensuring secure-by-design solutions, • Design and implement robust security architectures for both software and hardware components in line with customer and regulatory expectations, • Develop and maintain cybersecurity frameworks and models for new and existing systems, aligned with recognised standards such as IEC 62443 and IEC 62351, • Identify and implement improvements to cybersecurity processes, enhancing both protection levels and operational efficiency, • Produce and oversee Factory Acceptance Testing (FAT) and Site Acceptance Testing (SAT) documentation, leading security validation activities, • Support and mentor project teams throughout the full lifecycle, offering specialist advice on product and system security, • Deliver internal training sessions to raise awareness and capability in cybersecurity practices, • Track, assess, and communicate security risks, issues, and mitigation plans to stakeholders and leadership teams, • Ensure adherence to corporate policies, compliance requirements, and best practices for handling sensitive information, • Professional cybersecurity certification completed or underway (e.g. CISSP, IEC 62443-related credentials), • Practical experience within Operational Technology (OT) environments or Industrial Control Systems, • Familiarity with industry standards including IEC 62443 and IEC 62351, • Understanding of substation automation, protection technologies, and communication protocols such as IEC 61850, • Awareness of regulatory frameworks such as NIS2 and associated security level requirements, • Knowledge of industrial network topologies (e.g. PRP, HSR), • Experience with security technologies including firewalls, intrusion detection systems, VPNs, and encryption protocols, • Strong communication skills with the ability to engage both technical and non-technical stakeholders