Transport for London
Technical Head - OT Cyber Security
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Job title: Technical Head - OT Cyber Security
Band: 4
Salary: circa £95,000 (depending on skills & experience)
Contract type: TfL Permanent
Reference: SF5334
Location: TfL Offices/Hybrid
Closing date for applications: Tuesday August 20th @ 23:59
All offers of employment are subject to satisfactory right-to-work checks. Candidates must be able to demonstrate their right to work in the UK. At the present time TfL is unable to offer visa sponsorship for this role.
Role Overview
As the Technical Authority, the role directs, leads and line manages the TfL Engineering Cyber Security team, overseeing and managing the cyber security activities in TfL Engineering, providing expert advice and guidance to programmes, sub-programmes, projects and risk owners in Capital Delivery on all matters of cyber and information security risk management. As a first line of defence capability, the team supports risk owners in ensuring that the organisation has appropriate and effective cyber security defensive capabilities in place to protect our operational technology systems.
The role will engage and maintain relationships with key stakeholders and teams and provide support to regulatory activities and capital delivery projects, enhancing cyber security capabilities and undertaking activities to reduce cyber security risk. The role applies extensive expertise in the field of cyber security, providing authoritative technical leadership, developing OT Cyber Security Standards (Engineering Control Documents), interpreting technical strategy and company policy to satisfy business requirements. They will support the development and implementation of solutions, demonstrating a good understanding of the business operation and requirements when formulating solutions and recommendations and providing constructive challenges to deliver the right outcomes.
Key Accountabilities
- Directing, leading and managing a team of cyber security engineers who are responsible for working with project teams ensuring projects implement cyber security in accordance with TfL policies, standards and guidelines as well as international standards and good practice.
- Supporting the development of appropriate management processes, to then implement these processes to ensure security requirements are continually updated and reflected in the system security solution designs.
- Ensuring the cyber security risk management and assurance processes are established and implemented to provide continuous feedback to all stakeholders and to improve the security posture in projects.
- Ensuring that cyber security requirements are established, implemented, verified and validated and that cyber security risks are identified, managed and controlled throughout the project lifecycle, so that systems are acceptably secure at the point of delivery. Involved in reviewing and agreeing the cyber security requirements that result from the individual project risk assessments.
- Support the cyber security engineers, project engineers, assurance leads and other business and third party stakeholders in the creation, review and approval of cyber security assurance to support system acceptance.
- Represents TfL Engineering as a cyber security Subject Matter Expert. Be the cyber security primary point of contact, engaging where necessary with the likes of the TfL Cyber Security Team, Engineering Professional Heads, Department for Transport, TfL Cyber Security Steering and Working Groups and other applicable stakeholders.
- Support cyber security engineers in the creation and review of cyber security artefacts and deliverables.
- Make authoritative technical recommendations which have a high impact on organisational performance
- Ensuring the safety, functionality and compliance of high risk, newly implemented or altered assets, engineering processes, procedures or systems
- Specify technical competence requirements for the workforce to enable the assignment of the right capabilities
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Essential Skills
- Relationship and stakeholder management, including excellent interpersonal and influencing skills. Relevant stakeholders may include all levels including senior executives.
- Highly effective verbal and written communications skills, particularly the ability to readily translate technical risks into business language.
- Ability to review and influence technology and engineering designs at a high level.
- Ability to analyse and recommend cyber security requirements and controls.
- Ability to lead a team across a varied portfolio of work.
- Excellent analytical and problem solving skills using a pragmatic approach.
- Maintaining a constructive approach to developing and mentoring team members.
Essential Knowledge
- Has current knowledge and understanding of cyber security and information security practices, principles, tools and techniques.
- Qualifications and certifications from information security bodies such as: GIAC, ISC2, ISACA, ISA, CompTIA.
- Knowledge of relevant legislation and Regulation such as: Data Protection Act (DPA), Network and Information Systems (NIS) Regulation, Payment Card Industry Data Security Standard (PCI DSS).
- Knowledge of industry best practice and frameworks such as: ISO27001, IEC62443, NIST Cyber Security Framework, CIS Critical Security Controls.
- Knowledge in telecommunications and IP networking, network and computer system architecture, network infrastructure, enterprise-level cyber security technologies for use in complex environments.
Desirable Knowledge
- Degree level education or equivalent experience, ideally in science, engineering, technology, computing, cyber security or a related field.
Essential Experience
- Proven leadership experience in a multifaceted organisation specifically with stakeholder management at many levels
- Experience communicating, engaging and influencing a variety of junior and senior stakeholders
- Experience developing, coaching and mentoring team members.
- Experience engaging with major internal and external parties to achieve business objectives.
- Experience of working with engineering / operational technology, such as industrial control systems, particularly those related to safety critical / critical national infrastructure functions.
- Experience of applying security by design and security in operation.
- Experience providing cyber security advice and guidance.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Application Process
Please apply using your CV & Cover Letter
Think carefully about the skills, knowledge and experience in the advert and cover this in your CV
PDF format preferred and do not include any photographs or images
Closing date for applications: Tuesday August 20th @ 23:59
Equality, diversity and inclusion
We are committed to equality, diversity and inclusion and aim to reflect the diverse communities we serve. We believe that a diverse workforce enables us to deliver better services and outcomes. Our goal is to make our recruitment as inclusive as possible. As a Disability Confident Leader, we actively encourage applications from disabled people. As part of the Disability Confident scheme, we aim to offer an assessment or interview to candidates who apply via the scheme where the minimum essential criteria for skills, knowledge and experience has been met. In some circumstances, it may not be practical to offer an interview or assessment to every candidate who applies through the scheme and meet the minimum essential criteria; in these situations, we select candidates who best meet the minimum criteria for the job rather than interviewing all who meet them.
Across all recruitment activity, we recognise that selection methods may vary depending on the nature and scale of the campaign and will be applied fairly, consistently and proportionately in line with our Disability Confident commitments.
Benefits
In Return For Your Commitment And Expertise, You Will Enjoy Excellent Benefits And Scope To Grow. Rewards Vary According To The Level Of Role But Mostly Include The Below:
- Final salary pension scheme
- Free travel for you on the TfL network
- Reimbursement of 75% of the cost of a standard class Ticket for National Rail travel from home
- 30 days annual leave plus public and bank holidays
- TfL is committed to work-life balance, operating a hybrid working approach where business and role requirements allow
- Private healthcare discounted scheme (optional)
- Tax-efficient cycle-to-work programme
- Retail, health, leisure and travel offers
- Discounted Eurostar travel
We will make every effort to give you as much notice as possible, however some interviews/assessments could be organised at short notice.
Vetting Process
At Transport for London, safety, trust and fairness sit at the heart of how we recruit. Our Vetting Charter (https://tfl.gov.uk/corporate/careers/our-vetting-process) explains the checks we carry out before you join us, helping ensure we create a safe, inclusive and reliable network for everyone who depends on our services. We simply ask that the information you provide is honest and accurate so we can progress your application smoothly. If something doesn’t match or can’t be verified, we may not be able to move forward with your application, but we’ll always treat you with transparency, respect, and clear communication throughout.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location