Location: Ebbw Vale, United Kingdom

Thales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billons of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure.

Together we offer fantastic opportunities for committed employees to learn and develop their career with us. At Thales UK, we research, develop, and supply technology and services that impact the lives of millions of people each day to make life better, and keep us safer. We innovate across five major industries; Aerospace, Defence, Ground Transportation, Security and Space. Your health and well-being matters to us and that's why we offer you the flexibility to do what's important to you; whether that's part time hours, job sharing, home working, or the ability to flex your start and finish times. Where possible, we support a working pattern that suits your lifestyle and helps you reach your ambitions.

Title: Cyber Security Consultant - Industrial

Our opportunity

To provide business driven, cost effective advice on the design for Industrial Control Systems (ICS) customers that follows international standards and guidance:

• Advise clients on regulation and standards that are applicable to the sector of operation
• Provide guidance on how a client can turn their enterprise requirements into secure ICS designs
• Undertake asset discovery activities to identify an ICS estate
• Identify the vulnerabilities in the ICS environment and provide advice on mitigations
• Support the design of secure operational environments
• Support clients in the development of policies and procedures to contribute to the resiliency of organisations and their ICS environments
• Support early client engagement to develop business opportunities
• Act as a trusted advisor to clients undertaking change activities

Key Responsibilities and Tasks

Assists customers in the routine application and interpretation of OT security legislation, standards, policies and practices.

• Undertakes Asset discovery activities
• Production of ICS network diagrams
• Develop security evidence as required and specified by the customer to enable the effective investment decisions
• Check or report compliance with applicable security standards and procedures
• Selects or creates an appropriate methodology for use across the client programme.
• Identifies ICS risks which are systemic across the programme or business
• Understands and provides guidance on the threat environment
• Recommends implementation of new ICS security controls across the programme or enterprise to provide more cost effective risk mitigation in the long term and ensures these are traceable
• Plans and manages delivery of an ICS work programme

Skills and Expertise

• A degree or equivalent in related control systems or cyber security
• Good to have GIAC GICSP or ISC2 CISSP certification
• 5 years' experience in an Industrial Control /Operational Technology environment (like: Automated manufacturing facility, Utility provider and Critical National Infrastructure
• Understanding of industrial control systems device configuration and possesses the ability to test, diagnose, configure and maintain control systems
• Articulate how security in the connected world is best implemented at the point where IT meets other industry domains such as manufacturing/CNI
• An understanding of the threats arising from the exploitation of vulnerabilities in the attack surfaces created across a distributed system and how these can be managed
• Understanding of how to secure a network using technologies and security protocols
• Undertake vulnerability assessments of networks and devices using tools and databases to produce a contextualised list of vulnerabilities
• Produce security architecture design documents that have been created through an analysis of the potential risks, which has taken into account threats and likely attack routes to a system and produces pragmatic security controls
• Selection of appropriate security components to provide security-enforcing functions that can be justified through the evaluation of component's security function and implementation
• Demonstrate a working knowledge of the Policies and Standards that are required for systems operating in a controlled environment. Such as ISO, industry specific for Nuclear / CNI / transportation or government/department policies
• Production of security risks through identification of vulnerabilities, assessment of exposure, likelihood and severity of the risk in a quantitative or qualitative format that follows an industry recognised risk assessment methodology
• Ability to analyse information and produce reports, network diagrams and recommendations on how to improve security posture
• Ability to plan, control, report and manage the risk for a defined package of work to ensure delivery of on-time, budget and quality products

What can we offer you?
On offer is a competitive salary and benefits package, which includes;

• Performance Related Bonus
• 37 hour working week with flexible hours
• Pension Scheme
• 28 days annual leave (Plus Bank Holidays)
• Life Cover
• 24/7 Employee Assistance Program and access to mental wellbeing app
• Employee discount shopping schemes on major brands and retailers
• Gym membership discounts

#LI-SS1

YOUR CAREER AT THALES

We're committed to giving you opportunities to be your best. We believe in embracing the passion and potential of our people, and to achieve this we offer market leading training, development and experiences, along with the opportunity to be mentored and coached by some of the smartest minds in the industry.

Your health and well-being matters to us and where possible, we support a working pattern that suits your lifestyle and helps you reach your ambitions.

Thales is an equal opportunities employer and diversity and inclusion are integral to the success of Thales.

In line with Thales' Baseline Security requirements, candidates will be asked to provide evidence of identity, eligibility to work in the UK and employment and/or education history for up to three years. Some vacancies may require full Security Clearance which can require further evidence to be provided. For further details of the evidence required to apply for Baseline and Security Clearance please refer to the Defence Business Services National Security Vetting (DBS NSV) Agency.

At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working.

Thales UK is committed to providing an inclusive and barrier-free recruitment process. We will provide reasonable adjustments and support to ensure neuro-diverse applicants or those with a disability or long-term condition can be their best during the recruitment process. To request an adjustment,if you need this job advert in an alternative format or if you have any questions about the recruitment process, please contact Resourcing Ops for mid to senior roles, or the Early Careers Team for graduate and apprentice roles.

Great journeys start here, apply now!