Rail Cyber Security Lead

Key Responsibilities

• Serve as the subject matter expert (SME) for rail cyber security across global engagements.
• Lead design and deliver complex cyber security assessments across both operational technology (OT) and information technology (IT) environments.
• Apply deep knowledge of rail-specific standards and frameworks including:
  • IEC 62443 (Industrial Cyber Security)
  • TS 50701 (Railway Cyber Security)
  • IEC 63452 (Railway Rolling Stock Cyber Security)
• Conduct or oversee penetration testing activities vulnerability assessments architecture reviews risk assessment and threat modelling for rail clients.
• Provide expert interpretation of cyber security requirements for railway operators manufacturers and integrators.
• Ensure security recommendations are aligned with safety operational continuity and regulatory requirements across the rail ecosystem.

• Provide expert understanding of the rail ecosystem including:
  • Signalling systems
  • Rolling stock
  • Control centres
  • Wayside and trackside equipment
  • Rail operational processes and safety requirements
• Translate complex rail operations knowledge into training and mentorship for internal teams.
• Act as the internal thought leader on emerging rail threats vulnerabilities and industry trends.

• Support the creation and growth of new rail opportunities globally.
• Build NCC Groups market presence in the rail sector through:
  • Thought leadership (whitepapers webinars industry events)
  • Client engagements and pre-sales support
  • Partnerships with key rail OEMs operators and regulators
• Collaborate with engagement managers and leadership to define rail-focused service offerings.
• Contribute to bids proposals and technical scoping activities for prospective customers.

• Potentially support projects across maritime automotive and aviation domains as required with team backing.
• Maintain awareness of common OT and safety-critical technologies across transport sectors.
• Promote knowledge-sharing across the wider Transport Cyber Security practice.

• Provide mentoring guidance and technical leadership to consultants at various levels.
• Work closely with colleagues across global teams to deliver integrated and high-quality engagements.
• Promote a collaborative supportive and inclusive team culture.

• Act as a trusted advisor to clients providing clear actionable cyber security recommendations.
• Communicate complex concepts in a clear professional and client-friendly manner.
• Ensure high-quality deliverables and maintain strong client satisfaction throughout engagements.

Skills Knowledge and Expertise

• Proven experience in rail cyber security ideally within operators OEMs integrators or a cyber consultancy.
• Strong experience working with and applying:
  • IEC 62443 (critical infrastructure cyber security)
  • TS 50701 (railway cyber security framework)
  • IEC 63452 (rolling stock cyber security)
• Strong understanding of OT systems and technologies including SCADA industrial control systems (ICS) and safety-critical environments.
• Practical experience in penetration testing or security assessment methodologies (not necessarily a full-time tester but capable).
• Experience with secure architecture review threat modelling and risk assessment in industrial or transport environments.

• In-depth understanding of the rail operational ecosystem including signalling rolling stock safety systems and regulatory standards.
• Direct experience working within or for rail operators system suppliers or rail-integrated cyber projects.

• Excellent communication skills in both technical and non-technical contexts.
• Strong client-facing experience and relationship management skills.
• Ability to lead engagements and influence stakeholders at all levels.
• Willingness to work collaboratively across geographies and disciplines.
• Ability to teach and mentor others on rail systems and cyber security.

• Recognised cyber certifications (e.g. CISSP GICSP ISA/IEC 62443 CyberSecurity Expert).
• Experience contributing to industry standards or regulatory consultations.
• Background in safety engineering or systems engineering in transport.

Benefits

• Flexible Working: Balance your work and personal life with our flexible working options.
• Generous Holiday Allowance: Enjoy 25 days of holiday plus bank holidays with the option to buy up to 5 additional days of annual leave differs for SOC shift workers please speak to your TA partner for more information).
• Medicash & Critical Illness Scheme
• Financial & Investment Benefits: Enjoy peace of mind with our Pension Life Assurance and Share Save Scheme.
• Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities.
• Green Car Scheme: Drive green and save money with our eco-friendly car scheme.
• Cycle Scheme: Stay fit and healthy with our cycle-to-work scheme.
• Special Time Off: Take time off for those big moments in life like getting married/entering into a civil partnership becoming a grandparent and welcoming home a new pet.
• Family Planning: Benefit from our generous maternity and paternity leave as well as time off and support for those undergoing fertility treatments.