Jobs in York, United Kingdom

Senior Cyber Security Consultant page is loaded## Senior Cyber Security Consultantlocations: GB.Bristol.The Hub: GB.London.Nova Northtime type: Full timeposted on: Posted Todayjob requisition id: R-140878### **Job Description**## Overview**Leading the edge of transformation.**We know that different people have different priorities, which is why we're here to support you. Flexible and remote working is a central part of our culture. So, talk to us about what's ideal for you – from reduced weeks to buying more leave over school holidays. And if you're returning from a career break, ask us how we can help you transition back into work with us.We deliver technically challenging and time-critical projects across multiple sectors, including Aerospace, Defence and Critical National Infrastructure (CNI), and Operational Technology (OT). Due to our continued growth, we have open positions in our GRC, Security Architecture, Threat and Vulnerability, and Operational Technology teams. Our role as trusted advisors allows us to offer rewarding careers to those seeking to enhance their skills and experience in dynamic environments.As a Senior Cyber Security Consultant, you’ll play a pivotal role in protecting Aerospace, Defence and CNI/OT clients from evolving cyber threats. You’ll lead projects that shape national security, working alongside industry experts in a supportive, innovative environment. We offer clear pathways for career advancement, professional development, and opportunities to mentor junior consultants. This role will suit experienced qualified professionals with experience of working in either Defence OR CNI/OT and are looking to continue to develop and progress their career and provide real world benefit to clients. In return, we offer a challenging and rewarding role, career development, an empowered and supportive working environment with a competitive reward package. We invest in your professional growth through certifications, training and leadership pathways.You will work on ‘business as usual’, technical refresh, and new project environments, applying technical knowledge and innovative thinking in complex and non-routine contexts. You will help clients establish robust security governance, perform risk assessments, and deploy effective security controls and solutions aligned with business risk appetite. You will be expected to contribute to winning new business, managing delivery, and mentoring others within the security team. Projects are likely to involve working on client sites, (although hybrid working allows us to be flexible), and may involve travel across the UK and, occasionally overseas.## Your role***Client Delivery-**** Provide cyber security advice and guidance for clients in various environments.* Lead and deliver risk assessments, security governance, and deployment of effective security controls tailored to client needs.* Develop, review and maintain security related artefacts, policies and procedures to ensure compliance and best practice. Manage multiple projects concurrently, balancing business and client priorities.* Deliver high-quality work under pressure and to tight deadlines, ensuring stakeholder expectations are met.***Technical Leadership-**** Apply technical security knowledge creatively to solve complex and non-routine challenges.* Mentor and support colleagues, sharing expertise and fostering a culture of continuous improvement within the security team.* Articulate cyber security concepts and recommendations to both technical and non-technical audiences.***Business Development-**** Identify and pursue new business opportunities, contributing to proposals and client engagement.* Develop innovative solutions to emerging cyber security challenges.* Build and maintain strong relationships with clients, stakeholders, and team members.## About you* Experience of delivering technical cyber security consultancy in multi-disciplined environments, with proven ability to work both independently and collaboratively. Strong background in information assurance, including developing Information Security Management Systems (ISMS), conducting risk assessments, and deploying appropriate security controls.* Excellent verbal and written communication skills, with the ability to engage effectively with stakeholders at all levels. Proven ability to work both independently and collaboratively within a multi-discipline, matrix organisation. Strong organisational skills, with experience managing multiple projects and tasks concurrently. Ability to deliver security outcomes to tight deadlines while maintaining quality and managing stakeholder expectations.* Willingness and flexibility to travel throughout the UK (and occasionally overseas) as required.* Relevant professional certifications (e.g., ISO27000, NIST Cyber Security Professional, CISMP, CISM, CISSP, CCSP, Chartered Cyber Security Professional) are highly desirable. Solid understanding of ‘Secure by Design’ methodology. Commitment to ongoing professional development and willingness to learn new frameworks and technologies.* Experience in the UK Defence sector, including knowledge of MoD security policies and processes (e.g., HMG Information Assurance Policies, Security Policy Framework, JSP440, JSP604/JSP453).* Experience conducting and managing security assurance and accreditation activities for Defence capabilities or experience delivering cyber security consultancy in OT environments (e.g., energy, utilities, transportation). Be able to apply knowledge, with creative and innovative thinking, in a broad range of complex and non-routine contexts covering people, process and technology relating to the cyber risk management of OT/ICS.* Experience with SCADA, PLC and RTU packages and understanding how they integrate with field devices, historians, and corporate IT networks. Facilitate Cyber Security risk assessments and determine the most cost-effective deployment of security controls and solutions in line with the client’s business risk appetite to protect OT/ICS environments.* Select appropriate technology to meet clients’ security requirements and help them deploy that technology in live OT/ICS environments. Familiarity with OT cyber security standards or regulatory frameworks (e.g., IEC 62443, NIST CSF, NIS Regulations, HSE OG-0086).* Relevant OT cyber security qualifications (e.g., GICSP, IEC/ISA 62443). Membership of recognised security professional bodies (e.g., IISP, IS2, BCS, CIISEC).* Ability to create client policies and procedures to meet corporate and regulatory requirements in OT environments. Experience selecting and deploying appropriate technology in live CNI environments.## Reward & benefitsExplore the rewards and benefits that help you thrive – at every stage of your life and your career. Enjoy competitive salaries, employee rewards and a brilliant range of benefits you can tailor to suit your own health, wellbeing, financial and lifestyle choices. Make the most of a myriad of opportunities for training and professional development to grow your skills and expertise. And combine our hybrid working culture and flexible holiday allowances to balance a great job and fulfilling personal life.## About AtkinsRéalisWe're , a world-class engineering services and nuclear organization. We connect people, data and technology to transform the world's infrastructure and energy systems. Together, with our industry partners and clients, and our global team of consultants, designers, engineers and project managers, we can change the world. We're committed to leading our clients across our various end markets to engineer a better future for our planet and its people.## Additional information**Security clearance**This role may require security clearance and offers of employment will be dependent on obtaining the relevant level of clearance. If this is necessary, it will be discussed with you at