Transport Managing Security Consultant
Posted:
3 June 2026 (30+ days ago)
Application Deadline:
10 November 2026
Vacancies:
1 Vacancy
Job Summary
We are seeking a highly skilled Automotive Cyber Security Lead to join our Global Transport practice. This role is pivotal in strengthening and expanding our cyber security capability within the global automotive ecosystem while also supporting cross-domain engagements in rail maritime and aviation as needed.
The ideal candidate will bring deep knowledge of automotive cyber security connected and software-defined vehicle technologies operational technology (OT) embedded systems relevant international cyber security standards and regulations (including ISO/SAE 21434 UNECE R155 UNECE R156 and ISO 26262) penetration testing methodologies and the broader transport addition to technical delivery the individual will play a key role in supporting business development building client trust and elevating NCC Groups profile within the automotive sector.
This is a fully remote client-facing role requiring strong collaboration communication and consulting skills.
Key Responsibilities
Technical Delivery & Automotive Cyber Security Expertise
- Act as a subject matter expert (SME) for automotive cyber security across global engagements.
- Lead and deliver complex cyber security assessments across vehicle engineering manufacturing operational technology (OT) and information technology (IT) environments.
- Apply deep knowledge of automotive-specific standards and frameworks including:
- ISO/SAE 21434 (Road Vehicle Cybersecurity Engineering)
- UNECE R155 (Cyber Security Management System)
- UNECE R156 (Software Update Management System)
- ISO 26262 (Functional Safety)
- Conduct or support penetration testing vulnerability assessments architecture reviews risk assessments and Threat Analysis and Risk Assessments (TARA) for automotive clients.
- Provide expert interpretation of cyber security requirements for vehicle manufacturers suppliers technology providers and mobility operators.
- Ensure security recommendations are aligned with safety regulatory operational and business requirements throughout the vehicle lifecycle.
Automotive Domain Expertise
- Provide expert understanding of the automotive ecosystem including:
- Connected vehicles
- Software-defined vehicles (SDVs)
- Electronic Control Units (ECUs)
- In-vehicle networks (CAN LIN FlexRay Automotive Ethernet)
- Telematics and connected services
- Electric vehicle charging infrastructure
- Manufacturing and production environments
- Vehicle development validation and homologation processes
- Translate complex automotive engineering and operational knowledge into training and knowledge-sharing activities for internal teams.
- Contribute to the development of internal automotive cyber security capabilities methodologies and best practices.
- Maintain awareness of emerging threats vulnerabilities regulations and industry trends affecting the automotive sector.
Business Development & Practice Growth
- Support the identification creation and growth of automotive cyber security opportunities globally.
- Help strengthen NCC Groups presence within the automotive sector through:
- Thought leadership activities including white papers webinars and industry events
- Client engagements and pre-sales support
- Collaboration with OEMs Tier 1 suppliers mobility providers and industry bodies
- Collaborate with engagement managers and practice leadership to support the development of automotive-focused service offerings.
- Contribute to bids proposals statements of work and technical scoping activities for prospective customers.
Cross-Domain Support (Multi-Modal Transport)
- Support projects across rail maritime and aviation domains where automotive cyber security expertise can add value.
- Maintain awareness of common OT embedded and safety-critical technologies across transport sectors.
- Promote knowledge sharing and collaboration across the wider Transport Cyber Security practice.
Client Engagement & Delivery Excellence
- Act as a trusted advisor to clients providing clear and actionable cyber security recommendations.
- Communicate complex technical concepts in a professional and client-friendly manner.
- Deliver high-quality outputs and maintain strong client satisfaction throughout engagements.
- Build and maintain positive working relationships with clients and key stakeholders.
Skills Knowledge and Expertise
Technical Experience
- Proven experience in automotive cyber security ideally within OEMs Tier 1 suppliers mobility providers automotive technology companies or a cyber security consultancy.
- Strong experience working with and applying:
- ISO/SAE 21434
- UNECE R155
- UNECE R156
- ISO 26262
- Strong understanding of embedded systems vehicle electronics automotive communications networks connected vehicle platforms and safety-critical environments.
- Practical experience conducting or supporting penetration testing and security assessment activities.
- Experience performing secure architecture reviews threat modelling TARA activities and risk assessments within automotive or transportation environments.
- Familiarity with automotive development lifecycles software delivery processes and regulatory compliance requirements.
Domain Knowledge
- In-depth understanding of the automotive ecosystem including vehicle architectures connected vehicle platforms software-defined vehicles manufacturing environments supplier ecosystems and automotive cyber security regulations.
- Direct experience working within or alongside automotive OEMs Tier 1 suppliers mobility service providers or automotive cyber security programmes.
- Understanding of vehicle engineering safety validation and homologation processes.
Soft Skills & Professional Attributes
- Excellent communication skills in both technical and non-technical contexts.
- Strong client-facing and stakeholder management skills.
- Ability to lead workstreams and influence stakeholders at all levels.
- Ability to work collaboratively across geographies teams and disciplines.
- Strong consulting mindset with the ability to understand client challenges and provide pragmatic solutions.
- A passion for coaching mentoring and knowledge sharing.
Desirable (Not Mandatory)
- Recognised cyber security certifications such as CISSP GICSP ISA/IEC 62443 Cyber Security Expert OSCP or GIAC certifications.
- Automotive cyber security certifications or formal training relating to ISO/SAE 21434 UNECE R155/R156 or automotive engineering disciplines.
- Experience contributing to industry standards working groups or regulatory consultations.
- Background in automotive engineering systems engineering functional safety or vehicle development.
- Knowledge of EV ecosystems charging infrastructure security and software-defined vehicle architectures.
Benefits
What do we offer in return
We have a high-performance culture which is balanced evenly with world-class well-being initiatives and benefits:
- Flexible Working: Balance your work and personal life with our flexible working options.
- Generous Holiday Allowance: Enjoy 25 days of holiday plus bank holidays with the option to buy up to 5 additional days of annual leave.
- Medicash & Critical Illness Scheme
- Financial & Investment Benefits: Enjoy peace of mind with our Pension Life Assurance and Share Save Scheme.
- Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities.
- Green Car Scheme: Drive green and save money with our eco-friendly car scheme.
- Cycle Scheme: Stay fit and healthy with our cycle-to-work scheme.
- Special Time Off: Take time off for those big moments in life like getting married/entering into a civil partnership becoming a grandparent and welcoming home a new pet.
- Family Planning: Benefit from our generous maternity and paternity leave as well as time off and support for those undergoing fertility treatments.
Required Experience:
Contract