Cyber Security Architect

Do you want to work to make Power for Good? We're the world's largest independent renewable energy company, guided by a vision to create a future where everyone has access to affordable, zero carbon energy. Achieving our ambitions would be impossible without our people, as we tackle some of the world's toughest problems. We continually invest in our diverse workforce, promising rewarding work that makes a real impact, opportunities to learn from inspiring colleagues, and personal and professional growth.

The Global Cyber Architect will support the Director of Cyber Security in ensuring that the company’s Information Technology and Operational Technology (IT & OT) systems are optimally designed, configured, and protected from cyber threats to ensure continuous and effective business operations. This role will work with Cyber Service Providers, internal support teams, and key stakeholders to implement and operate cyber security systems and processes on behalf of the Director of Cyber Security and the Group CIO. Ultimately, this role will support RES in continually adapting and enhancing its cyber security, embedding it into business practices and technology to become recognised as a market leader in delivering cyber security services within renewables. The post-holder will be required to travel periodically to RES sites to establish and maintain excellent customer relations.

Key accountabilities:

• Lead the production of cyber architecture roadmaps, standards, and patterns to support the successful delivery of IT and OT solutions and business objectives.
• Act as the lead design authority for cyber security architecture matters through the production and review of solution proposals.
• Work closely with the Global Lead Architect to ensure all material cyber-related technology change is assessed and endorsed by the Technical Design Authority (TDA).
• Oversee the delivery of activities within a continuous programme of cyber technology improvements focused on enhancing the resilience, standardisation, and reliability of the RES technology environments.
• Lead the technical design and implementation of a ‘cyber security management system’ to underpin getting and maintaining a global cyber accreditation.
• Ensure cost optimisation practices are applied to ‘AS-IS’ and ‘TO-BE’ OT cyber architecture solutions to maximise the benefits returned from IT and OT technology in line with business objectives.
• Undertake cyber-related technical due diligence for business proposals offered to clients.
• Assist in gathering and analysing threat intelligence and learning from security partners, industry peers, and government agencies to understand potential and relevant impacts to RES.
• Support incident response and recovery activities in relation to IT and OT systems in close liaison with Cyber Security colleagues.
• Oversee security penetration testing of IT and OT systems to ensure effective management and remediation of any resulting improvement actions.
• Assist in designing cyber incident simulation scenarios to ensure response and recovery capabilities are routinely tested and adapted as required.
• Lead on the technical design of Cyber ‘Health Check’ services to be provided to clients.
• Shape and gain buy-in to the cyber strategy and supporting standards, roadmaps, and patterns across the OT and IT teams and business stakeholders.
• Direct supervision of 3rd party suppliers in the delivery and execution of cyber services.

Knowledge:

• Extensive knowledge of cyber security in relation to IT & OT systems and infrastructure.
• Extensive knowledge of good practice enterprise level design, implementation, and operation of IT & OT environments.
• Knowledge of technology governance processes covering financial management, project management, compliance, and IT risk management.
• Excellent knowledge and experience of Cyber Architecture (spanning Enterprise, Information, Technical, Application, People & Process).
• Solid understanding of managing and partnering with 3rd party cyber security suppliers.
• Deep understanding of Cyber security principles, frameworks, and standards e.g. ISO27001, NERC-CIP, and NIST-CSF.

Skills:

• A ‘business outcome’ approach and style to delivering technology change.
• Strong Business Acumen and collaborative in approach.
• Proven ability to engage, build strong relationships, influence, and partner with stakeholders across functions and geographies.
• Credible and capable; able to quickly build confidence in senior managers and peers.
• Passionate about technology and how it can improve the customer experience.
• Excellent negotiation and resolution skills.
• An ability to shape direction and translate strategy into action.
• An individual of integrity who will respect and demonstrate RES values.
• Sensitive and intuitive, whilst displaying gravitas and credibility.

Experience:

• Extensive experience and track record working in Cyber Security and Architecture.
• A highly capable, all-round technologist, preferably in the B2B sector, with experience of change and transformation.
• Experience gained in the Construction, Utilities, or a project-based business.
• Accustomed to dealing with senior managers and exceptionally customer-focused.
• Demonstrated deep knowledge of technical/Infrastructure architectures and standards.
• Experience of architecting and auditing leading cyber security technologies such as firewalls, vulnerability scanners, and authentication services.
• Experience of using architecture modelling tools and practices.
• Delivery of cyber security solutions to remediate business risk and external threats.

Desirable:

• Accreditation or certification relating to architecting, deploying, and securing enterprise cloud platforms including Azure, AWS, and Google.
• Accreditation to ITIL foundations, COBIT or equivalent, CISSP or equivalent.

At RES, we celebrate difference as we know it makes our company a great place to work. Encouraging applicants with different backgrounds, ideas, and points of view, we create teams who work together to solve complex problems and design practical solutions for our clients.