Principal Cyber Security Consultant

Role overview

Core responsibilities

• Lead multiple complex OT cybersecurity programmes and align engagements with client objectives and risk appetite.
• Act as engagement lead, manage client relationships, and guide internal delivery teams.
• Design and govern secure OT architectures for industrial environments.
• Implement security controls such as network segmentation and hardened ICS/SCADA systems.
• Establish governance frameworks, perform risk assessments and gap analyses, and oversee control implementation.
• Develop OT security policies and procedures aligned with corporate and regulatory requirements.
• Advise senior executives and operational stakeholders in clear business and technical language.
• Oversee project teams, mentor junior staff, and coordinate multidisciplinary delivery.
• Contribute to service development, bids, proposals, industry events, and thought leadership.

Required experience and capability

• Extensive technical cybersecurity consultancy experience in OT environments such as energy, utilities, or transportation.
• A strong record of securing industrial control systems and critical national infrastructure.
• Experience conducting risk assessments and deploying security controls on operational industrial plants.
• Ability to coordinate multiple projects and deliver against client priorities and deadlines.
• Excellent written and verbal communication skills for technical and executive audiences.
• Strong organization, prioritization, teamwork, and stakeholder-management skills.
• In-depth knowledge of the OT system lifecycle from specification and procurement through operation.
• Hands-on experience with industrial control system and SCADA security technologies.
• Strong familiarity with IEC 62443, NIST CSF, NIS Regulations, and HSE OG-0086.
• Ability to obtain required UK security clearance and willingness to travel to UK client sites.

Preferred qualifications

• OT-focused certifications such as GICSP or ISA/IEC 62443 are highly desirable.
• General certifications such as CISSP or CISM are also desirable.
• Membership of relevant professional bodies such as IISP, BCS, or IET is advantageous.
• Industry thought leadership, conference speaking, publishing, or standards contributions are viewed positively.
• Deep expertise in a cyber or information security sub-domain is a bonus.

Working arrangements

• The employer describes a hybrid working culture and flexible working policies.
• The role includes travel throughout the UK to client sites and may involve work on live industrial sites.

Rewards and benefits

• The employer offers competitive salaries, employee rewards, and flexible benefits covering health, wellbeing, financial, and lifestyle choices.
• Training and professional development opportunities are available.
• Flexible holiday allowances are offered.

About AtkinsRéalis