Cyber Security Design Authority

Overview

Location:

Crawley, United Kingdom. We offer a hybrid approach to office and remote working (circa 40% remote) with flexibility to travel to Thales & Customer facilities/locations as needed.

Thales people architect identity management and data protection solutions at the heart of digital security. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations rely on us to verify identities, grant access to digital services, analyze information and encrypt data to make the connected world more secure.

Together we offer opportunities for committed employees to learn and develop their career with us. We research, develop, and supply technology and services that impact the lives of millions of people each day to make life better and keep us safer. We innovate across Aerospace, Defence, Security and Space. Your health and well-being matters and we support a working pattern that suits your lifestyle.

Title:
Business Unit Cyber Security Design Authority

Location: The ideal location would be Crawley; other Thales sites may be considered for the right applicant with regular travel to Crawley. Hybrid working with circa 40% remote and travel flexibility.

List core activities here that the role will be required to conduct & deliver

• Act in capacity as the Cyber Design Authority (DA) across the Thales Business Line (BL) Programme covering Core, Low & High team activities, services & deliverables with a direct reporting line to the UK Chief Product Security Officer and BL Technical Director.
• Ensure adherence to and intelligent application of Thales UK Cyber Engineering Governance and processes across all BL activities.
• Support cybersecurity maturity development of BL, including cybersecurity knowledge transfer and upskilling to senior BL staff.
• Assess and assure cybersecurity aspects of products and solutions through life. This includes, but is not limited to, assessing key cybersecurity approach, the cyber engineering artefacts and the overall security case.
• Provide guidance on the applicable Policies & Standards required for the relevant industrial applications.
• Evaluation and guidance for technology selection and the impact to security / cyber risks.

• Able to operate in multi-stakeholder environments with the ability to influence to ensure right outcomes are reached.
• Able to select and follow structured processes to identify threats, vulnerabilities, assess exposure and identify & mitigate security risks.
• Ability to guide teams to take systems through formal assurance and acceptance including working with customer organisations and 3rd parties.
• Ability to apply secure by design approach through engineering lifecycle and in service.
• Ability to understand where and how key cybersecurity technologies are applied, the fundamentals behind the technology and the ability to assess suitability of candidate products.
• Ability to articulate (and distinguish between) cyber security and cyber resilience approaches.

• 5 years+ in senior Cyber Security Engineering roles.
• Proven experience of guiding complex projects through security risks and mitigation activities.
• Working with external partners and accreditation bodies.
• Experience of applying cybersecurity to OT, IOT and/or embedded environments.

• Engineering degree or equivalent in an appropriate field.

• CISSP Accreditation
• CCP Architect
• SABSA Chartered Security Arch – Foundation & Practitioner
• IEng/CEng

• Enthusiastic about the way in which Cybersecurity & Trust will make the world a safer place.
• Possess a desire to expand knowledge and continually acquire new knowledge & skills required for the job & personal growth.
• Connects at a deep level with others; is a trusted adviser to top stakeholders; develops and maintains a network of influential players in the industry critical to Thales’s future success.
• Makes timely, high-impact, high-quality decisions in uncertain and ambiguous contexts; sees these through to completion.

This role will require SC Clearance. It would be advantageous if…