Cyber Security Consultant

About the role

Arup is seeking a Cyber Security Consultant to protect digital systems, infrastructure and data across the built environment. The role focuses on essential infrastructure sectors such as transport, utilities, energy and communications, helping to safeguard critical services and the communities that rely on them.

Key responsibilities

• Conduct cyber security risk assessments to identify vulnerabilities, threats and mitigation strategies for built‑environment projects.
• Develop and implement cyber security strategies, policies and assurance frameworks aligned with industry standards and regulatory obligations.
• Review, design and strengthen security architecture of digital systems and networks, supporting penetration testing, vulnerability assessments and remediation activities.
• Evaluate business continuity, disaster recovery and resilience measures to ensure effective response to cyber incidents.
• Provide guidance to project teams and clients on best practices, emerging threats and compliance requirements.

Required profile

• Relevant tertiary qualification in Computer Science, Information Security or Operational Technology.
• Minimum of 5 years’ experience in cyber security, preferably within the built‑environment or critical‑infrastructure sector.
• Knowledge of regulations and standards such as NIST Cybersecurity Framework, ISO 27001 and IEC 62443.
• Familiarity with industrial control systems (ICS/OT) and associated technologies.

Required skills

• Risk assessments
• Vulnerability assessments
• Penetration testing
• Security architecture design
• Business continuity planning
• Disaster recovery planning
• Knowledge of NIST Cybersecurity Framework, ISO 27001, IEC 62443

What we offer

• Competitive, fair and equitable total reward package.
• Opportunities to work on socially useful projects with global impact.
• Supportive, diverse and inclusive work environment.