The Opportunity
We are seeking an experienced Senior Cyber Security Engineer / Cyber Assurance Lead to support the delivery of complex Operational Technology (OT) and critical infrastructure programmes.
Working across the full project lifecycle, you will lead cyber assurance activities, drive security best practices, and ensure solutions are aligned to regulatory requirements and industry standards.
This is an excellent opportunity for a cyber security professional with strong experience in security assurance, risk management, and secure solution design within highly regulated environments.
Essential Skills & Experience
- Extensive experience in Cyber Security Engineering, Cyber Assurance, or Security Architecture roles.
- Proven experience delivering security assurance within Operational Technology (OT) environments.
- Strong understanding and practical application of the IEC 62443 standards framework.
- Experience undertaking threat analysis, risk assessments, and security control definition.
- Knowledge of security architecture principles, including network segmentation, zones, and conduits.
- Experience defining and managing security requirements throughout the engineering lifecycle.
- Strong understanding of security testing methodologies and assurance practices.
- Ability to engage effectively with both technical and non-technical stakeholders.
- Excellent communication skills with experience influencing customers, suppliers, and project teams.
- Experience supporting regulatory and standards compliance activities.
Key Responsibilities
- Lead cyber security assurance activities across complex operational technology and engineering programmes.
- Engage with customer security teams to understand security strategies, risk appetite, assurance requirements, and governance processes.
- Define, maintain, and manage cyber security requirements throughout project delivery.
- Produce and maintain Cyber Security Management Plans, ensuring delivery against agreed timescales, budgets, and quality expectations.
- Develop secure architectures using zoning, segmentation, and defence-in-depth principles.
- Conduct threat modelling, security risk assessments, and define effective mitigation strategies.
- Assess third-party products and components against security requirements and standards.
- Review engineering and development artefacts to ensure compliance with security objectives.
- Define and support security verification and validation activities including penetration testing and security assessments.
- Identify vulnerabilities and support remediation activities across project lifecycles.
- Represent cyber security within technical governance forums, design reviews, and project milestone reviews.
- Contribute to continuous improvement through lessons learned and emerging threat analysis.
- Support and mentor engineers to develop cyber security capability across project teams.
- Keep up to date with evolving threats, technologies, regulations, and industry standards.
Desirable Experience
- Knowledge of CENELEC standards and their application within engineering environments.
- Experience working within critical national infrastructure, transportation, utilities, defence, or other highly regulated sectors.
- Familiarity with regulations and standards such as: IEC 62443, NIS / NIS2, EU Cyber Resilience Act (CRA), TS 50701.
- Experience mentoring and developing junior engineers.
- Security certifications such as: CISSP, CSSLP, CCPC, CISMS, ABSA.
If you are an experienced Senior Cyber Security Engineer / Cyber Assurance Lead with a strong background in cyber assurance, operational technology security, and risk management, we'd like to hear from you.