OT Cybersecurity Consultant
Joining Arup Arup’s purpose, shared values and collaborative approach has set us apart for over 75 years, guiding how we shape a better world. Arup is a multi–disciplinary firm of designers, planners, engineers, consultants, and technical specialists, working across every aspect of today’s-built environment. Together we help our clients solve their most complex challenges – turning exciting ideas into tangible reality as we strive to find a better way and shape a better world. The Opportunity The role of a Cyber Security Consultant in the built environment is of paramount importance, especially when it comes to safeguarding critical infrastructure. Critical infrastructure refers to systems and assets that are vital for the functioning of a society, including transportation networks, water and wastewater systems, power grids, communication networks, and more. These infrastructures are the backbone of our modern civilization, enabling the delivery of crucial services and ensuring the smooth operation of various sectors. This role is to provide expert guidance and aid in ensuring the security and protection of digital systems, infrastructure, and data within the built environment. This will be achieved by implementing robust security measures, raising awareness, and developing effective response plans, which will contribute to the resilience and security of our essential systems, protecting both the integrity of our critical infrastructure and the well-being of our society. We’re looking for a cyber-security professional, who is passionate about delivering the best outcomes for our clients, who is flexible and open to new challenges, and who brings strong social and communications skills. You Will Be Expected To
- Work directly with clients to identify and identify their cyber risks; then scope innovative and sustainable solutions to address those risks, including estimating cyber security engagements and assisting in proposal development.
- Conduct comprehensive risk assessments to identify potential cyber threats and vulnerabilities in the built environment.
- Develop and implement effective cyber security strategies and policies aligned with industry best practices and regulatory needs.
- Deliver effective oversight and assurance programmes to identify, manage and mitigate cyber risk.
- Manage project delivery, including task and commercial management and manage cyber security staff by recruiting, training, and coaching employees.
- A qualification in Engineering, Computer Science, Information Security, or a related field.
- A relevant cyber-security professional qualification (or demonstrable evidence of working towards a qualification) including, but not exclusively, any of the following: NCSC Associate Cyber Professional (ACP) / Certified Information Security Professional (CISSP) / Certified Information Security Manager (CISM) / Certified Cloud Security Professional (CCSP) / Certified Wireless Security Professional (CWSP) / Certified in Information Systems and Risk Controls (CRISC) / Certified Information Systems Auditor (CISA).
- A background in cyber security either as a consultant or within an organisation that operates physical assets
- Proven people management background to provide coaching and development for others to maximize their potential.
- Familiarity with built environment (ICS\OT) industry practices and technologies.
- Knowledge of relevant regulations and standards, such as NIST Cybersecurity Framework, ISO 27001, and IEC 62443.