A

AtkinsRéalis

Engineering services for infrastructure and energy

Senior Cyber Security Consultant

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeNo salary listed

About the Job

Requirements

  • Experience delivering technical cyber security consultancy in multi-disciplined environments.
  • Strong information assurance background, including developing Information Security Management Systems, conducting risk assessments, and deploying appropriate security controls.
  • Ability to engage effectively with stakeholders at all levels and work independently and collaboratively within a multi-discipline, matrix organisation.
  • Organisational skills and experience managing multiple projects and tasks concurrently.
  • Ability to deliver security outcomes to tight deadlines while maintaining quality and managing stakeholder expectations.
  • Willingness and flexibility to travel throughout the UK and occasionally overseas as required.
  • Experience in the UK Defence sector, including knowledge of Ministry of Defence security policies and processes such as HMG Information Assurance Policies, the Security Policy Framework, JSP440, and JSP604/JSP453.
  • Experience conducting and managing security assurance and accreditation activities for Defence capabilities, or experience delivering cyber security consultancy in operational technology environments such as energy, utilities, or transportation.
  • Ability to apply creative and innovative thinking across complex and non-routine operational technology and industrial control system cyber risk management contexts involving people, process, and technology.
  • Experience with Supervisory Control and Data Acquisition (SCADA), programmable logic controller (PLC), and remote terminal unit (RTU) packages, and understanding how they integrate with field devices, historians, and corporate IT networks.
  • Ability to facilitate cyber security risk assessments and determine cost-effective security controls and solutions aligned with client risk appetite to protect operational technology and industrial control system environments.
  • Ability to select appropriate technology to meet clients’ security requirements and help deploy it in live operational technology and critical national infrastructure environments.
  • Familiarity with operational technology cyber security standards or regulatory frameworks, including IEC 62443, NIST Cybersecurity Framework, NIS Regulations, and HSE OG-0086.
  • Ability to create client policies and procedures that meet corporate and regulatory requirements in operational technology environments.

Responsibilities

  • Provide cyber security advice and guidance to clients in various environments.
  • Lead and deliver risk assessments, security governance, and deployment of security controls tailored to client needs.
  • Develop, review, and maintain security-related artefacts, policies, and procedures to ensure compliance and best practice.
  • Manage multiple projects concurrently while balancing business and client priorities.
  • Deliver high-quality work under pressure and to tight deadlines, meeting stakeholder expectations.
  • Apply technical security knowledge creatively to solve complex and non-routine challenges.
  • Mentor and support colleagues, share expertise, and foster continuous improvement within the security team.
  • Articulate cyber security concepts and recommendations to technical and non-technical audiences.
  • Identify and pursue new business opportunities and contribute to proposals and client engagement.
  • Develop innovative solutions to emerging cyber security challenges.
  • Build and maintain strong relationships with clients, stakeholders, and team members.
  • Work in business-as-usual, technical refresh, and new project environments.

Desired Qualifications

  • Relevant professional certifications, such as ISO 27000, NIST Cyber Security Professional, CISMP, CISM, CISSP, CCSP, or Chartered Cyber Security Professional.
  • Understanding of Secure by Design methodology.
  • Commitment to ongoing professional development and willingness to learn new frameworks and technologies.
  • Relevant operational technology cyber security qualifications, such as GICSP or IEC/ISA 62443.
  • Membership of recognised security professional bodies, such as IISP, IS2, BCS, or CIISEC.

About the Company

AtkinsRéalis

Engineering services for infrastructure and energy

AtkinsRéalis provides engineering services for infrastructure and nuclear projects, connecting people, data, and technology to plan, design, build, and manage systems worldwide. It delivers integrated services through consulting, design, engineering, and project management, using a global team and data-driven collaboration to move projects from concept to commissioning. The company’s global reach and end-to-end capability across conventional engineering and nuclear sectors enable coordinated delivery across multiple disciplines. Its goal is to transform infrastructure and energy systems worldwide by delivering safe, reliable, and efficient engineering solutions.

Company size
10,001+
Company stage
Acquired
Total funding
$2.8B
Headquarters
Epsom, United Kingdom
Founded
1938

Recently Posted Jobs

Explore more opportunities at AtkinsRéalis

See more jobs