Cybersecurity Consultant at EgisGroup

As part of Egis’ Consulting and Operations business line (C&O BL), the UK Consulting activities include: • Building advisory services through Thomas & Adamson International • Digital asset management services (DAM Services) • Aviation consulting & engineering services through Helios Technology • Cybersecurity advisory services specialising in Safety Critical OT Systems and Critical InfrastructureThe Cybersecurity team sits as part of the Digital Asset Management Services team within Egis C&O Business Line. The UK-based team works closely alongside other cybersecurity teams within Egis, including France, Singapore and Australia. Whilst the majority of the work is performed from our London offices, there is potential for some on-site missions with travel. This will be London based role. All candidates must have the right to work in the UK. Mission Description The objective of Egis' cybersecurity team is to control cybersecurity risks and threats to transport infrastructure. Our value proposition is based on 4 principles: • Optimize cybersecurity strategy, policies, and procedures • Evaluate cybersecurity measures against regulations, standards, and best practices • Implement cybersecurity countermeasures to reduce cyber risk • Maximize cyber resilience and ensure business continuity.It is in this context of rapid growth that Egis' cybersecurity team is looking to strengthen its teams. Your main missions are as follows: • Involvement in existing cybersecurity projects with the incumbents on a projects throughout the Egis C&O business line: • Development of cybersecurity and information security requirements in line with standards and regulatory drivers • Mapping between existing business practices and cyber evaluation frameworks such as UK NCSC CAF, NIST CSF, Eurocontrol Cyber Maturity Model, etc. • Design and roadmap development for the implementation of security practices and processes through a range of existing organisations • Design & Establishment of risk registers, risk assessments, Information Security Management Systems and Risk Management frameworks • Ad hoc support for the production of cybersecurity technical studies (detailed analysis of data and systems, identification of risks, collection of additional data, interpretation of data and formulation of recommendations for improvement, validation of cybersecurity documents and processes). • Occasional support for the drafting and/or costing of certain cybersecurity offers.