At a Glance
- Tasks: Lead cybersecurity design activities and ensure compliance with security standards.
- Company: Join Hitachi Rail, a global leader in digital transformation and technology.
- Benefits: Flexible working hours, market-leading training, and career development opportunities.
- Other info: Inclusive workplace with diverse opportunities for growth and mentorship.
- Why this job: Make a real impact in cybersecurity while working with cutting-edge technology.
- Qualifications: Degree in cyber security or related field; experience in systems engineering preferred.
The predicted salary is between 60000 - 80000 £ per year.
A career at Hitachi Rail will help create a legacy. With operations in every corner of the world, our work goes to the cutting‑edge of digital transformation and technology. From the multi‑cultural strength of our global organisation to the sustainable and innovative ways we work to bring people together, there's something for everyone to get stuck into.
We are currently looking for a Cyber Design Authority who will be the technical authority for all cybersecurity design activities across the SRS portfolio. You will provide strategic direction and expert oversight to ensure that all cyber practices, controls, and solutions meet required security standards, regulatory compliance, and operational effectiveness. You will be responsible for defining and implementing cybersecurity policies, standards, and governance frameworks, ensuring robust risk management, regulatory alignment, and assurance. This includes making certain that all technical, procedural, and operational controls are compliant and effectively aligned with business objectives. Working closely with security architects, engineers, SMEs, and delivery teams, you will drive a cohesive, proactive, and integrated approach to cybersecurity across SRS programmes and services. This is a hybrid role working a minimum of two days per week from our office in Canary Wharf.
Key Responsibilities
- Analyse customer needs/requirements and assess solution architecture and technical choices.
- Ensure security solution compliance with customer needs, product policy, make‑team‑buy (MTB) strategy & applicable legislation, standards & regulations.
- Review technical security risks and opportunities and related mitigation plans throughout the bid or project.
- Ensure best trade‑off between customer requirements & product policy consistent with schedule, costs, MTB strategy & risks/ opportunities.
- Check the production and the maintenance/service aspects of the solution with the Production Process/Technology Manager (PPTM) and the Service Engineering Manager.
- Approve the technical specification and source selection of subsystems/products to be outsourced, by taking into account MTB policy, export restrictions and offset requirements.
- Check that the engineering environment for the solution is consistent with country/company instruction, and overall solution cost, technical risks & schedule.
- Ensure, with the support of engineering SMEs & safety stakeholders that solution design takes into account contract requirements and applicable security legislation, standards & regulations, and that related certification activities are performed correctly.
- Review and approve the completion of security specific integration, verification, validation and qualification results.
- Lead bid/project security engineering reviews and approve the security deliverables at each project decision milestone.
- Organise appropriate technical meetings and peer reviews together with the Engineering Delivery Manager and other technical stakeholders and experts, in order to perform the solution technical assessment and validation.
- Contribute to business strategy and product development as required.
- Interface with the client to define the solution.
- Keep abreast of technical, legislative and industry specific standards developments in security both within and outside of the company.
Technical Skills and Experience
- Strong technical writing skills and excellent interpersonal communication skills.
- Expertise in cyber and information security solutions relevant to the company, e.g. urban signalling, mainline signalling, communication systems, integrated control systems, etc.
- Excellent understanding of risk assessment frameworks and compliance methodologies.
- Strong knowledge of business case development, resource planning, and effective budget management.
- Extensive experience across systems engineering lifecycle disciplines with a focus on security, including secure‑by‑design principles, requirements capture, modelling, analysis, system design, and independent verification and validation (IV&V).
- In‑depth knowledge and experience of full systems engineering lifecycles for large, complex systems.
- Expertise in industry specific security standards and legislation.
- Well‑proven technical/project experience in the development and application of security solutions to critical OT or IT control systems and/or safety critical systems.
Additional Qualifications
- Mandatory: Qualified to Degree level (preferably Masters) in a relevant field, e.g. cyber security, networks, computer science, etc.
- Desirable: Certified or working towards a senior level security accreditation, such as CISSP, CISM, etc.
Human Skills
- Proven track record of building and maintaining cross‑functional relationships to deliver outcomes that benefit both the immediate team and the wider business.
- Excellent presentation skills.
- Effective personal organisation and an ability to remain composed and focused under pressure.
- Demonstrated ability to lead, manage, mentor and coach a diverse team.
- Excellent problem‑solving ability, trade‑off skills and attention to detail.
What to Expect
We aim to complete a two‑stage interview process. The interviews will focus on technical and behavioural competencies. Reasonable adjustments are available with prior notice so please let the Talent Acquisition (TA) partner know if this would be necessary.
What We Can Offer
We're committed to giving you opportunities to be your best. We believe in embracing the passion and potential of our people, and to achieve this we offer market leading training, development and experiences, along with the opportunity to be mentored and coached by some of the smartest minds in the industry. We hire from within as our first priority, so you'll have a myriad of opportunities within our diverse, global organisation.
Flexibility
Your health and well‑being matters to us and that's why we offer you the flexibility to do what's important to you; whether that's part time hours, job sharing, home working, or the ability to flex your start and finish times. Where possible, we support a working pattern that suits your lifestyle and helps you reach your ambitions.
Equal Opportunity Statement
At Hitachi Rail, there is a place for everyone. We welcome and value differences in background, age, gender, sexuality, family status, disability, race, nationality, ethnicity, religion, and world view. It is our commitment to create an inclusive environment - we are proud to be an equal opportunity employer.
Security Clearance
Some vacancies may require full Security Clearance which can require further evidence to be provided. For further details of the evidence required to apply for Baseline and Security Clearance please refer to the UK Government website.
Cyber Design Authority employer: Hitachi Vantara Corporation
At Hitachi Rail, we pride ourselves on being an exceptional employer, offering a dynamic work culture that fosters innovation and collaboration. Located in the vibrant Canary Wharf, our hybrid working model provides flexibility while ensuring employees have access to market-leading training and development opportunities. We are committed to nurturing talent from within, creating a diverse and inclusive environment where every individual can thrive and contribute to meaningful projects in the realm of cybersecurity.
Contact Details:
Hitachi Vantara Corporation Recruitment Team
StudySmarter Expert Advice🤫
We think this is how you could land Cyber Design Authority
✨Tip Number 1
Network like a pro! Get out there and connect with people in the cybersecurity field. Attend industry events, join online forums, or even hit up LinkedIn. The more people you know, the better your chances of landing that Cyber Design Authority role.
✨Tip Number 2
Show off your skills! Prepare a portfolio or case studies showcasing your previous work in cybersecurity. When you get the chance to chat with potential employers, share your experiences and how you've tackled challenges in the past.
✨Tip Number 3
Practice makes perfect! Before your interview, run through common technical and behavioural questions. Get a friend to help you out or record yourself. This will boost your confidence and help you articulate your thoughts clearly when it counts.
✨Tip Number 4
Apply through our website! We want to see your application come through directly. It shows you're genuinely interested in joining us at Hitachi Rail and gives you a better shot at standing out from the crowd.
We think you need these skills to ace Cyber Design Authority
Some tips for your application 🫡
Tailor Your Application:Make sure to customise your CV and cover letter to highlight your experience in cybersecurity design. Use keywords from the job description to show that you understand what we're looking for.
Show Off Your Technical Skills:Don’t hold back on showcasing your technical writing skills and any relevant certifications. We want to see your expertise in cyber and information security solutions, so make it clear how your background aligns with our needs.
Be Clear and Concise:When writing your application, keep it straightforward and to the point. We appreciate clarity, so avoid jargon unless it's necessary. Make sure your key achievements stand out!
Apply Through Our Website:We encourage you to apply directly through our website. It’s the best way to ensure your application gets into the right hands and shows us you're serious about joining our team.
How to prepare for a job interview at Hitachi Vantara Corporation
✨Know Your Cybersecurity Standards
Before the interview, brush up on the latest cybersecurity standards and regulations relevant to the role. Familiarise yourself with industry-specific legislation and how it applies to the company's operations. This will show that you’re not just technically savvy but also aware of the compliance landscape.
✨Prepare for Technical Questions
Expect in-depth technical questions about cybersecurity design and risk management. Review your past experiences and be ready to discuss specific projects where you implemented security solutions. Use the STAR method (Situation, Task, Action, Result) to structure your answers clearly.
✨Showcase Your Communication Skills
As a Cyber Design Authority, you'll need to communicate complex ideas effectively. Practice explaining technical concepts in simple terms, as you may need to interact with non-technical stakeholders. Highlight any experience you have in leading teams or presenting to clients.
✨Demonstrate Your Problem-Solving Ability
Be prepared to discuss how you've tackled challenges in previous roles. Think of examples where you had to make trade-offs between security requirements and project constraints. This will illustrate your critical thinking and decision-making skills, which are crucial for this position.
