At a Glance
- Tasks: Lead cybersecurity design activities and ensure compliance with security standards.
- Company: Join Hitachi Rail, a global leader in digital transformation and technology.
- Benefits: Enjoy flexible working, market-leading training, and career development opportunities.
- Other info: Inclusive workplace with diverse opportunities for growth and mentorship.
- Why this job: Make a real impact in cybersecurity while working with cutting-edge technology.
- Qualifications: Degree in cyber security or related field; experience in systems engineering and security solutions.
The predicted salary is between 60000 - 80000 £ per year.
About Us
A career at Hitachi Rail will help create a legacy. With operations in every corner of the world, our work goes to the cutting-edge of digital transformation and technology. From the multi-cultural strength of our global organisation to the sustainable and innovative ways we work to bring people together, there’s something for everyone to get stuck into. And that’s where you come in.
London, Greater London, United Kingdom (Hybrid)
Our Opportunity
We are currently looking for a Cyber Design Authority who will be the technical authority for all cybersecurity design activities across the SRS portfolio. You will provide strategic direction and expert oversight to ensure that all cyber practices, controls, and solutions meet required security standards, regulatory compliance, and operational effectiveness.
You will be responsible for defining and implementing cybersecurity policies, standards, and governance frameworks, ensuring robust risk management, regulatory alignment, and assurance. This includes making certain that all technical, procedural, and operational controls are compliant and effectively aligned with business objectives.
Working closely with security architects, engineers, SMEs, and delivery teams, you will drive a cohesive, proactive, and integrated approach to cybersecurity across SRS programmes and services. This is a hybrid role working a minimum of two days per week from our office in Canary Wharf.
Key Responsibilities:
- Analyse customer needs/requirements and assess solution architecture and technical choices.
- Ensure security solution compliance with customer needs, product policy, make-team-buy (MTB) strategy & applicable legislation, standards & regulations.
- Review technical security risks and opportunities and related mitigation plans throughout the bid or project.
- Ensure best trade-off between customer requirements & product policy consistent with schedule, costs, MTB strategy & risks/opportunities.
- Check the production and the maintenance/service aspects of the solution with the Production Process/Technology Manager (PPTM) and the Service Engineering Manager.
- Approve the technical specification and source selection of subsystems/products to be outsourced, by taking into account MTB policy, export restrictions and offset requirements.
- Check that the engineering environment for the solution is consistent with country/company instruction, and overall solution cost, technical risks & schedule.
- Ensure, with the support of engineering SMEs & safety stakeholders that solution design takes into account contract requirements and applicable security legislation, standards & regulations, and that related certification activities are performed correctly.
- Review and approve the completion of security specific integration, verification, validation and qualification results.
- Lead bid/project security engineering reviews and approve the security deliverables at each project decision milestone.
- Organise appropriate technical meetings and peer reviews together with the Engineering Delivery Manager and other technical stakeholders and experts, in order to perform the solution technical assessment and validation.
- Contribute to business strategy and product development as required.
- Interface with the client to define the solution.
- Keep abreast of technical, legislative and industry specific standards developments in security both within and outside of the company.
Technical Skills and Experience
- Strong technical writing skills and excellent interpersonal communication skills.
- Expertise in cyber and information security solutions relevant to the company, e.g. urban signalling, mainline signalling, communication systems, integrated control systems, etc.
- Excellent understanding of risk assessment frameworks and compliance methodologies.
- Strong knowledge of business case development, resource planning, and effective budget management.
- Extensive experience across systems engineering lifecycle disciplines with a focus on security, including secure-by-design principles, requirements capture, modelling, analysis, system design, and independent verification and validation (IV&V).
- In-depth knowledge and experience of full systems engineering lifecycles for large, complex systems.
- Expertise in industry specific security standards and legislation.
- Well-proven technical/project experience in the development and application of security solutions to critical OT or IT control systems and/or safety critical systems.
Additional qualifications
- Mandatory: Qualified to Degree level (preferably Masters) in a relevant field, e.g. cyber security, networks, computer science, etc.
- Desirable: Certified or working towards a senior level security accreditation, such as CISSP, CISM, etc.
Human Skills
- Proven track record of building and maintaining cross-functional relationships to deliver outcomes that benefit both the immediate team and the wider business.
- Excellent presentation skills.
- Effective personal organisation and an ability to remain composed and focused under pressure.
- Demonstrated ability to lead, manage, mentor and coach a diverse team.
- Excellent problem-solving ability, trade-off skills and attention to detail.
What to expect
We aim to complete a two-stage interview process. The interviews will focus on technical and behavioural competencies. Reasonable adjustments are available with prior notice so please let the Talent Acquisition (TA) partner know if this would be necessary. To find out what reasonable adjustments are, and what might be available, your TA partner will be happy to discuss this with you.
What We Can Offer
We’re committed to giving you opportunities to be your best. We believe in embracing the passion and potential of our people, and to achieve this we offer market leading training, development and experiences, along with the opportunity to be mentored and coached by some of the smartest minds in the industry. We hire from within as our first priority, so you’ll have a myriad of opportunities within our diverse, global organisation.
Flexibility
Your health and well-being matters to us and that’s why we offer you the flexibility to do what’s important to you; whether that’s part time hours, job sharing, home working, or the ability to flex your start and finish times. Where possible, we support a working pattern that suits your lifestyle and helps you reach your ambitions.
Thank you for your interest in Hitachi Rail. If your application is of interest, we will be in contact. Please do not hesitate to discover more about us and our latest jobs at Hitachi Rail Careers.
At Hitachi Rail, there is a place for everyone. We welcome and value differences in background, age, gender, sexuality, family status, disability, race, nationality, ethnicity, religion, and world view. It is our commitment to create an inclusive environment - we are proud to be an equal opportunity employer.
We would be delighted if you would be one of our followers at Hitachi Rail LinkedIn.
Some vacancies may require full Security Clearance which can require further evidence to be provided. For further details of the evidence required to apply for Baseline and Security Clearance please refer to the UK Government website.
Cyber Design Authority in London employer: Hitachi
At Hitachi Rail, we pride ourselves on being an exceptional employer, offering a dynamic work culture that fosters innovation and collaboration. Located in the vibrant Canary Wharf, our hybrid working model provides flexibility to suit your lifestyle while you engage in meaningful projects at the forefront of digital transformation. With a strong commitment to employee development, we provide market-leading training and mentorship opportunities, ensuring that you can grow your career within our diverse global organisation.
StudySmarter Expert Advice🤫
We think this is how you could land Cyber Design Authority in London
✨Tip Number 1
Network like a pro! Get out there and connect with people in the cybersecurity field. Attend industry events, webinars, or even local meetups. You never know who might have the inside scoop on job openings or can put in a good word for you.
✨Tip Number 2
Show off your skills! Create a portfolio that highlights your projects and achievements in cybersecurity. Whether it's a blog, GitHub repository, or case studies, having tangible evidence of your expertise can really set you apart from the competition.
✨Tip Number 3
Prepare for those interviews! Research common cybersecurity interview questions and practice your responses. Be ready to discuss your experience with risk assessment frameworks and compliance methodologies, as well as your approach to problem-solving in high-pressure situations.
✨Tip Number 4
Apply through our website! We at StudySmarter encourage you to check out the latest job openings directly on our site. It’s the best way to ensure your application gets noticed and shows your genuine interest in joining our team.
We think you need these skills to ace Cyber Design Authority in London
Some tips for your application 🫡
Tailor Your Application:Make sure to customise your CV and cover letter for the Cyber Design Authority role. Highlight your relevant experience in cybersecurity design and how it aligns with the responsibilities mentioned in the job description.
Show Off Your Technical Skills:Since this role requires strong technical writing skills, don’t shy away from showcasing your expertise in cyber and information security solutions. Use specific examples that demonstrate your knowledge of risk assessment frameworks and compliance methodologies.
Be Clear and Concise:When writing your application, keep it clear and to the point. Use bullet points where possible to make it easy for us to read through your qualifications and experiences. We appreciate a well-structured application!
Apply Through Our Website:We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you’re considered for the role. Plus, you can easily keep track of your application status!
How to prepare for a job interview at Hitachi
✨Know Your Cybersecurity Standards
Before the interview, brush up on the latest cybersecurity standards and regulations relevant to the role. Be prepared to discuss how these standards apply to the projects you’ve worked on and how you can ensure compliance in your future work.
✨Showcase Your Technical Expertise
Be ready to dive deep into your technical knowledge during the interview. Prepare examples of past projects where you implemented security solutions, focusing on your role in risk assessment and compliance methodologies. This will demonstrate your hands-on experience and problem-solving skills.
✨Prepare for Behavioural Questions
Expect questions that assess your ability to lead and collaborate with cross-functional teams. Think of specific instances where you successfully managed a diverse team or resolved conflicts. Use the STAR method (Situation, Task, Action, Result) to structure your responses.
✨Ask Insightful Questions
At the end of the interview, have a few thoughtful questions ready about the company’s approach to cybersecurity and their current challenges. This shows your genuine interest in the role and helps you gauge if the company aligns with your career goals.
