Cyber Security Project Manager

London Source: WhatJobs
£120,000–£138,000

Cyber Security Project Manager – CMDB & Asset Management

Contract: 6 Months
Location: London/ 2 days on-site)
IR35: Outside IR35
Rate: £700 per day

About the Role

We are currently recruiting for an experienced Cyber Security Project Manager to lead the delivery of a major CMDB, enterprise asset inventory and information inventory capability across both Operational Technology (OT) and Information Technology (IT) environments.

Working within a critical infrastructure / electricity distribution environment , you will play a key role in improving visibility, ownership and control of technology assets, operational systems, applications, services and information supporting essential network operations.

This is a complex, multi-disciplinary project requiring someone who can operate confidently across cyber security, IT, OT, engineering, asset management and information governance .

Key Responsibilities

  • Lead the end-to-end delivery of the CMDB, enterprise asset inventory and information inventory programme.
  • Develop project scope, delivery plans, milestones, governance, budgets, resources and success measures.
  • Manage multiple technical and business workstreams covering discovery, data collection, tooling, integrations, governance and operating models.
  • Lead the implementation or enhancement of an enterprise CMDB , including configuration-item classes, attributes, relationships and data-quality requirements.
  • Establish relationships between business services, applications, infrastructure, OT systems, information assets and accountable owners.
  • Coordinate integration with asset-discovery, ITSM, vulnerability management, SIEM, network management, cloud and other enterprise platforms.
  • Oversee asset discovery and reconciliation across corporate, operational and field environments.
  • Develop safe and proportionate approaches to OT asset discovery , recognising the operational and safety constraints of critical infrastructure.
  • Establish asset ownership, criticality, lifecycle and support information.
  • Lead the development of an enterprise information inventory covering data repositories, information owners, classification, retention and critical business processes.
  • Establish data-quality standards and processes covering completeness, accuracy, consistency, timeliness and ownership.
  • Manage project risks, issues, dependencies, decisions and changes.
  • Coordinate internal technical teams, engineering functions, suppliers, systems integrators and specialist cyber security partners.
  • Provide clear reporting to senior stakeholders and project governance forums.
  • Support alignment with relevant cyber security, regulatory and critical-infrastructure requirements.
  • Ensure the resulting capability is successfully transitioned into business-as-usual operations.

Essential Experience

The successful candidate will have:

  • Significant experience delivering cyber security, CMDB, asset management, ITSM or information governance projects .
  • Demonstrable experience working across both OT and IT environments .
  • Experience within energy, utilities, electricity distribution or another critical-infrastructure environment .
  • Practical experience implementing or improving a CMDB or enterprise asset repository .
  • Strong knowledge of asset discovery, configuration management, service mapping and data reconciliation.
  • Understanding of OT/ICS environments , including SCADA, control systems, substations, field assets and operational telecommunications.
  • Understanding of the differences between OT and IT, particularly around safety, availability, lifecycle and change management.
  • Experience establishing asset ownership, governance and data-quality controls.
  • Experience managing complex integrations between enterprise systems and technical data sources.
  • Strong project planning, governance, risk and stakeholder-management experience.
  • Experience managing technology suppliers, systems integrators or specialist consultancies.
  • Ability to communicate complex technical and data-related issues clearly to both technical and senior non-technical stakeholders.

Desirable Experience

  • Previous experience with a UK Distribution Network Operator (DNO) or Distribution System Operator (DSO) .
  • Experience with enterprise CMDB / ITSM platforms.
  • Experience with OT asset-discovery or industrial cyber-monitoring technologies.
  • Experience integrating CMDB, vulnerability-management, SIEM and enterprise architecture platforms.
  • Knowledge of the NCSC Cyber Assessment Framework, IEC 62443, ISO 27001, ISO 55001 or ITIL .
  • Experience developing information asset registers, data catalogues or information inventories.
  • Experience supporting regulatory assessments, audits or cyber security maturity programmes.
  • Understanding of smart grids, distributed energy resources or electricity-network digitalisation.

Qualifications

Relevant qualifications may include:

  • PRINCE2, APM, PMP or equivalent project management qualification.
  • ITIL certification.
  • CISSP, CISM, CRISC or equivalent cyber security certification.
  • OT cyber security / IEC 62443 certification.
  • Relevant qualifications in configuration management, data management or information governance.

Key Skills

  • Cyber Security Project Management
  • CMDB & Configuration Management
  • Enterprise Asset Management
  • OT & IT Asset Discovery
  • Information Governance
  • Service Mapping
  • Data Quality & Reconciliation
  • Cyber Risk & Operational Resilience
  • Stakeholder & Supplier Management
  • Project Governance & Delivery
  • Critical Infrastructure / Utilities
  • OT / ICS / SCADA environments

Why Apply?

This is an opportunity to take ownership of a high-profile cyber security and asset-management programme within critical national infrastructure , working across OT, IT, engineering and cyber security functions.

You will have a key role in establishing an authoritative view of the organisation’s assets, services and information, helping to strengthen cyber risk management, vulnerability management, incident response, operational resilience and regulatory assurance .

#J-18808-Ljbffr

Full job description from WhatJobs. Apply for this role →

Back to all jobs

Help others hire with confidence

Reviews on Trustpilot

Worked with Verifera as a candidate or employer? Your honest review helps the next person trust verified hiring.