Cyber Security Manager

Duration - 3 months initially

Location - Birmingham

IR35 - Outside

The Cyber Security Manager shall prepare and provide a cyber security management plan ("Cyber Security Management Plan") which describes, amongst other things, WMT's processes for:

Meeting the requirements of cyber security relating to the Maintainer's obligations under maintenance agreements with EWR and XC
The development and implementation (if necessary), and the operation, maintenance and continual improvement of a Cyber Security Management System (CSMS)
Audit and testing of CSMS compliance with the security standards and such other security requirements which are notified by the Operator from time to time
Compliance with the principles of ISO/IEC 27001 (Information Security Requirements Specification) in respect of the Services
Compliance with the principles of ISO/IEC27002 (Information Security Code of Practice) in respect of the Services
Meeting its obligations in the event of an actual, potential or attempted Breach of Security
Meeting its obligations to co-operate, assist and co-ordinate security with the Operator
Complying with the provisions in this Agreement relating to information and physical security
Identifying and selecting personnel in WMT who are responsible for the implementation of the Cyber Security Management Plan
Managing any security risks posed by subcontractors in accordance with this Agreement
Developing, implementing and maintaining security measures in relation to all aspects of the Services and all processes associated with the provision of the Services.

The ideal candidate will understand Operational Technology and the security required to manage it effectively, understand specific standards including NIS Directive, TS 50701, IEC 62443 and IEC 63452.

It will be beneficial if candidates understood on-train systems such as TCMS, PIS, CCTV, APC, ASDO, OTDR