Director - Cyber, ER & I

Cyber security is critical to every organisation. Across the Energy, Resources and Industrials sector (ER&I), organisations are modernising complex operational environments, adopting new technologies and transforming how they manage cyber risk and resilience. We need you to join us and help clients secure critical services, protect business value and deliver transformation with confidence.

You will build strong relationships as part of our Cyber practice, within Technology and Transformation. Cyber security is a business problem, not just a technical problem, and we need people with a diverse range of backgrounds and skill sets to help our clients solve the challenges they face. Join us and you will help clients address their most significant cyber security and technology resilience priorities, in a business with strong growth ambitions and outstanding opportunities for professional development.

Your role is likely to include:

• Advising executives on pragmatic, actionable cyber strategies and enterprise-wide transformation priorities.
• Applying a risk-based approach to emerging technologies and supporting secure digital and operational transformation.
• Designing and delivering secure-by-design transformation programmes across business, IT and operational technology environments.
• Assessing and improving cyber operating models, technology resilience, recovery capabilities and the management of cyber risk.
• Developing and executing a market strategy for cyber within Energy, Resources and Industrials, identifying priority clients, emerging needs and areas for sustainable growth.
• Building trusted relationships with key client stakeholders and decision-makers, including Board members, CIOs, CTOs, CISOs, technology leaders, operational leaders and transformation executives.
• Identifying, shaping and pursuing new opportunities, including nascent areas of market demand, and converting these into a strong pipeline of profitable work.
• Leading complex proposals and deals from qualification and solution shaping through commercial negotiation, contracting and risk management.
• Producing high-quality market and client materials, including go-to-market plans, points of view, proposals, executive presentations and client deliverables.
• Leading major client engagements, often across multiple concurrent programmes, with accountability for outcomes, quality, financial performance, delivery excellence and senior stakeholder confidence.
• Advising clients on how to build and embed resilience across people, process, technology, data, suppliers and operational environments.
• Shaping cyber strategies, operating models, governance frameworks, investment roadmaps and secure-by-design transformation approaches.
• Leading assessments and benchmarking across cyber maturity, technology resilience, recovery, architecture, service management and operational processes.
• Directing the design and implementation of resilient technology solutions, including enterprise backup and recovery, cyber recovery, resilient cloud architectures, network resilience and solutions for catastrophic cyber disruption or outage.
• Supporting technology and wider transformation programmes by defining business and technical requirements, evaluating options, designing target states, and embedding sustainable capabilities into the operating environment.
• Leading recovery planning, testing and exercising, failover automation, data resilience, resilient migration and the implementation of practical operating processes.
• Providing clear, authoritative advice to client executives and teams, translating complex cyber and technology issues into business decisions, priorities and investment choices.
• Developing practice capability, repeatable methods, propositions, alliances and talent to respond to changing sector demand.
• Contributing to the eminence of the Cyber and Technology Resilience team through market insight, thought leadership and external profile.
• Supporting and promoting an inclusive, high-performance team culture, developing future leaders and deploying diverse teams effectively.

Successful applicants typically have a degree or equivalent experience, with substantial real-world experience in cyber security, technology resilience and transformation. They are agile thinkers who can help senior stakeholders manage complex security and resilience challenges, while creating and converting market opportunities into lasting client relationships and successful delivery.

Key skills - not every candidate requires all of these, but you should be familiar with and/or have experience across the majority of the following:

• A strong track record as a market-making leader, with the ability to define a market position, originate opportunities, build a pipeline and win complex, high-value work.
• Deep Energy, Resources and Industrials sector experience, with a strong understanding of the commercial, operational, regulatory and technology context in which clients operate.
• An established network of senior client relationships and the credibility to engage Board and C-suite stakeholders on cyber risk, resilience and transformation.
• Strong commercial capability, including opportunity qualification, proposition development, solution shaping, pricing, cost estimation, negotiation and presentation of compelling commercial offers.
• The ability to understand ambiguous client problems, create a clear point of view and mobilise multidisciplinary teams around a pragmatic solution.
• Experience leading complex cyber and technology transformation programmes in demanding environments, with accountability for quality, risk, financial performance and client outcomes.
• The ability to communicate complex cyber and technology resilience issues simply and professionally to business and technical stakeholders, up to Board level.
• Experience developing cyber strategy, target operating models, governance, roadmaps, investment cases and secure-by-design approaches for wider transformation programmes.
• Experience leading resilience initiatives across people, process, technology, data and third parties, including the definition of critical or minimum viable company and supporting capabilities.
• Experience directing the delivery of resilience solutions from requirements definition through design, implementation, embedding and testing, including enterprise backup and recovery, cyber recovery, resilient cloud architecture and network resilience.
• Knowledge of hybrid technology environments, including on-premises, cloud and operational technology, and the ability to connect technical architecture decisions to business resilience outcomes.
• Experience of resilience assessments, recovery processes, data resilience, testing, exercising, failover automation, data centre or cloud migration, and operating model implementation.
• Knowledge of relevant cyber and technology resilience standards, frameworks, regulatory guidance and legislation, and the ability to apply them pragmatically to client environments.
• Strong leadership and people development capability, including building diverse teams, coaching senior talent, collaborating across organisational boundaries and creating an inclusive culture.
• Excellent analytical, problem-solving, project management and interpersonal skills, with the resilience to navigate complex client processes and competing priorities.
• Consulting experience and a strong record of producing clear, client-friendly materials across proposals, strategies, roadmaps, solution documentation and executive presentations.

Relevant cyber, architecture, cloud or risk certifications may be valuable but are not essential, for example CISSP, CISM, CISA, CCSP, SABSA, TOGAF or relevant cloud service provider certifications. Certifications in project management, service management or related domains may be valuable but are not essential, for example PRINCE2, ITIL or COBIT.

If you want to help solve some of the biggest tech and transformational challenges around, join us. Together, we’ll make an impact that matters.