Cyber Security Consultant

About the role

Arup is seeking a Cyber Security Consultant to protect digital systems, infrastructure, and data across the built environment. The role focuses on essential infrastructure sectors such as transport, utilities, energy, and communications, ensuring resilience and security for critical services and the communities that depend on them.

Key responsibilities

• Conduct cyber security risk assessments to identify vulnerabilities, threats, and mitigation strategies for built‑environment projects.
• Develop and implement cyber security strategies, policies, and assurance frameworks aligned with industry standards, client requirements, and regulatory obligations.
• Review, design, and strengthen security architecture of digital systems and networks, supporting penetration testing, vulnerability assessments, and remediation activities.
• Evaluate business continuity, disaster recovery, and resilience measures to support effective response and recovery from cyber incidents.
• Provide guidance and support to project teams and clients on best practices, emerging threats, and compliance requirements within the sector.

Required profile

• Recognised tertiary qualification in Computer Science, Information Security or Operational Technology.
• Minimum 5 years of relevant cyber security experience.
• Knowledge of regulations and standards such as NIST Cybersecurity Framework, ISO 27001 and IEC 62443.
• Strong understanding of cyber security principles, best practices and emerging trends in the built‑environment sector.
• Familiarity with Industrial Control Systems / Operational Technology industry practices.
• Related certifications (CISSP, CISM, CCSP, IEC 62443) are preferred.

Required skills

• Cyber risk assessment
• Vulnerability assessment
• Penetration testing
• Security architecture design
• Knowledge of NIST Cybersecurity Framework
• Knowledge of ISO 27001
• Knowledge of IEC 62443

What we offer

• Competitive, fair and equitable total reward package.
• Opportunities for professional growth within a diverse, inclusive collective.
• Work that has social impact and meaning for clients, communities and the environment.