Cyber Security Advisory Lead - ICS/SCADA/OT

About the Role

TfL is seeking a Cyber Security Advisory Lead with expertise in ICS/SCADA/OT to join their team. This role is critical in safeguarding TfL's extensive operations, which serve millions of passengers daily across London's Underground, bus network, and other services.

As a lead, you will be responsible for managing a team of cyber security advisors, providing specialist advice on Industrial Control Systems and Operational Technology. You will influence cyber security strategy, from high-level policy to architectural designs, ensuring the protection of TfL assets and minimizing cyber risk exposure.

Key Responsibilities

• Lead and line manage a team of cyber security advisors, providing specialist ICS/OT cyber security advice and guidance to stakeholders, project teams, and system owners.
• Build and maintain strong strategic relationships with key stakeholders, including risk owners and project teams.
• Ensure that risk owners receive high-quality cyber security advice to make informed decisions on mitigating cyber security risks.
• Support the implementation of cyber security controls for new and existing systems in line with TfL standards and best practices.
• Sponsor and implement cyber security capabilities to enhance the security and resiliency of technology systems.
• Oversee the continuous development and improvement of internal and external cyber security processes and team professional development.
• Prepare and present reports on cyber security assurance, risks, and KPIs.
• Quality assure the work delivered by the cyber security advisory team.
• Manage the delivery of cyber security projects and services across various business areas.
• Act as a primary point of contact for cyber security escalations.
• Chair and contribute to technology and cyber security governance groups.

Knowledge and Skills Required

• Proven experience in cyber security and information security practices, principles, tools, and techniques.
• Knowledge of telecommunications, IP networking, and system architecture.
• Familiarity with enterprise-level cyber security technologies and information security management concepts.
• Expertise in industry good practice and frameworks such as ISO27001, IEC62443, NIST Cyber Security Framework, and CIS Critical Security Controls.
• Understanding of relevant legislation like the Data Protection Act (DPA) and NIS Regulations.
• Excellent relationship and stakeholder management skills, with the ability to influence at all levels.
• Strong verbal and written communication skills, capable of translating complex technical risks into business language.
• Ability to review and influence technology and engineering designs, and analyse/recommend cyber security controls.
• Experience in leading a team and mentoring team members.
• Pragmatic approach to problem-solving and analysis.
• Experience with Industrial Control Systems/Operational Technology is advantageous.

Qualifications

• Degree level education or equivalent experience in a relevant field (science, engineering, technology, computing, cyber security) is desirable.
• Qualifications and certifications from information security bodies (e.g., GIAC, ISC2, ISACA, ISA, CompTIA) are desirable.

Additional Information

• This is a Permanent, Full-time role.
• The salary is £75,000 - £82,000 per annum, plus benefits.
• The role is based in North Greenwich, with a hybrid working arrangement (50% office attendance).
• UK Sponsorship is not available for this position.
• This role requires a minimum of BPSS and CTC security clearance.
• Excellent benefits include a final salary pension scheme, free travel on the TfL network, 30 days annual leave, and more.