Principal Consultant / Associate - OT Cyber Security

WSP’s recent global digital strategy, defines key strategic offerings that WSP wants to grow and invest in, and ‘Operational Technology Cybersecurity’ is one of them. This marks a significant acknowledgement of our cyber security success story so far and the commitment to our teams and clients to continue to deliver cyber security services applied and in context.

We are recruiting for a Cyber Security Consultant to join our industry-leading Cyber Security Capability team, which is delivering specialist cyber security services to a wide spectrum of industries.

As a valued member of the team, you will access a range of benefits including targeted professional development and the opportunity to work alongside specialists across our business. You will contribute to projects by providing cyber security and strategy advice, technical assurance, solution guidance, specification input, design support, and testing assurance to our domestic and international clients.

A little more about your role…

You will provide technical consultancy services aligned to client needs and will support WSP’s cyber security deliverables through the lifecycle of OT/IT development and Digital Transformation projects. You will contribute to the development of proportionate, risk-based recommendations and help translate strategy into practical delivery.

You will have a background in Cyber Security, OT, Integration or Systems Engineering, ideally gained in a consultancy or supplier environment. You will be comfortable working collaboratively within multidisciplinary teams, supporting junior colleagues where needed, and building trusted relationships with clients.

You will be involved in the following activities;

• Supporting clients on cyber security compliance, including NIS-D, NIST, ISO 27001, ISA/IEC 62443 and other relevant industry standards and best practice
• Contributing to governance frameworks and supporting the development of Cyber Security and Information Security Management Systems
• Assessing cyber security controls, reviewing architecture proposals, and supporting threat and risk assessments
• Supporting cyber security requirements analysis and tailoring outputs to client context
• Understanding business and technical requirements and translating them into clear, deliverable actions with support from senior colleagues
• Collaborating with clients, government agencies, partners and supply chains to help define technical and procedural solutions to complex problems
• Working across projects to support consistent delivery of best-practice cyber security
• Supporting client presentations and proposals by explaining our cyber security services and helping shape the best way to address digital resilience challenges

What we will be looking for you to demonstrate…

• Specifics of OT, IT and IoT/IIoT cyber security
• Industry specific experience of applied cyber security, ideally gained within the following sectors; Energy e.g. Nuclear, Oil/Gas, Electricity, Rail/Road, Healthcare, Smart Infrastructure/Buildings, Aviation, or Maritime.

• A degree in an engineering, computer science or other technical discipline or equivalent industry experience. A chartership in Engineering or Cyber Security or equivalent professional registration or the planning of achieving one is highly recommended.

• Ability to work effectively within teams, contributing to knowledge sharing and supporting early career professionals
• Supporting proposal writing and bid responses in collaboration with delivery and sales teams
• At least one of Telecoms, SCADA, mission critical, safety critical or big data architectures
• Threat modelling, Vulnerability analysis, Risk matrix modelling.
• Secure DevOps and secure systems engineering lifecycle
• Security Policy and governance
• Cloud Security including OT in the Cloud
• Incident Management frameworks, Security incident analysis, digital forensics, crisis management, SOC operations and supporting tools
• Strong knowledge and practical experience of cyber security platforms/tooling including IDS/IPS, SIEM, EDR/MDR, and system/device hardening would be advantageous.
  

Also, during your professional experience you will have gained experience in an OT/IT or electronics engineering/systems company with knowledge and practical experience in leading teams, collaborating with clients and partners within a Cyber Security environment.

We are looking for someone who has sound practical knowledge on the use and application of risk assessment methodologies in systems and software development (including Agile, ITIL and V-model processes) and combining them for optimal solutions.

If your career has given you the opportunity to contribute to technical reports, advise clients, work with formal security frameworks including ISA/IEC 62443 and NCSC’s CAF, and support the definition and design of OT solutions from a security perspective, then you would be a real asset to our team.