Senior Technical Consultant - OT Cyber Security

• Advising clients on cyber security compliance, especially for NIS-D, NIST, ISO 27001, ISA/IEC 62443 and other relevant industry standards and best practices.
• Developing governance frameworks and cyber security & information security management systems.
• Analyzing cyber security controls, commenting on architecture proposals and conducting threat and risk assessments.
• Tailoring cyber security requirements to client needs.
• Understanding business and technical requirements and translating them into tangible actions.
• Collaborating with clients, government agencies, partners and suppliers to define technical and procedural solutions to complex problems.
• Working across projects to support the delivery of best-practice cyber security.
• Presenting WSP’s cyber security services to clients and defining the best way to support them with challenges in digital resilience., WSP offers the “WSP My Hour” programme, allowing one hour each day for personal activities, and additional part-time, flexible working arrangements, as well as options to purchase extra leave or use bank holidays.

Expertise in several areas, including:

• OT, IT and IoT/IIoT cyber security specifics.
• Industry-specific experience of applied cyber security, ideally gained within one of the following sectors: Energy (e.g., Nuclear, Oil/Gas, Electricity, Rail/Road, Healthcare, Smart Infrastructure/Buildings, Aviation or Maritime).
• Team-leadership skills and development of early-career professionals.
• Knowledge of government frameworks.
• Writing proposals in collaboration with the sales team.
• Experience with telecoms, SCADA, mission-critical, safety-critical or big-data architectures.
• Threat modelling, vulnerability analysis and risk-matrix modelling.
• Secure DevOps and secure systems-engineering lifecycle.
• Security policy and governance.
• Cloud security, including OT in the cloud.
• Incident management frameworks, incident analysis, digital forensics, crisis management, SOC operations and supporting tools.
• Strong knowledge and practical experience of cyber security platforms and tooling, including IDS/IPS, SIEM, EDR/MDR, and system/device hardening (advantageous).

During your professional experience you will have gained experience in an OT/IT or electronics engineering/systems company with knowledge of leading teams and collaborating with clients and partners within a cyber security environment.

Role requirements include sound practical knowledge of risk assessment methodologies in systems and software development (including Agile, ITIL and V-model processes) and the ability to combine them for optimal solutions.

A degree in engineering, computer science or another technical discipline or equivalent industry experience is required. A chartership in engineering or cyber security, or equivalent professional registration, or plans to achieve one are highly recommended.

Work-life balance

WSP offers a hybrid working policy that allows you to work from home two days a week and provides opportunities to collaborate in modern offices across the UK.

Inclusivity & Belonging

WSP welcomes applicants from varied backgrounds and experiences, encouraging people to bring their whole and authentic selves to work.

Health & Wellbeing

WSP supports employee health and wellbeing through the Thrive programme, a Virtual GP service, reasonable workplace adjustments, a Gymflex scheme, and a comprehensive menopause support package.

WSP has a vacant position for a Cyber Security Consultant to join our industry-leading Cyber Security Capability team, which is delivering specialist cyber security services to a wide spectrum of industries.

As a key member of the team, you will be able to access a range of benefits, from targeted professional development, to helping the business improve its way of working. You will contribute to the team’s capability by providing cyber security and strategy advice, technical assurance, solution guidance, specification, design, and testing assurance to our domestic and international clients.

You will provide technical consultancy services in close alignment with client needs and will lead WSP’s cyber security deliverables through the lifecycle of OT/IT development and Digital Transformation projects. You will also provide strategic advice across our client spectrum as part of your delivery and growth role.