As part of the Transport UK Group, West Midlands Trains delivers around 1,300 train journeys a day, for more than 60 million passengers a year, across our two brands - West Midlands Railway and London Northwestern Railway.

We are committed to delivering a safe and reliable train service, by investing in our fleet of trains, stations and employees. As part of this investment we are looking to recruit a Cyber Security & Systems Engineer (CS&SE), on a full-time, permanent basis, based in Birmingham.

The Fleet Cyber Security & Systems Engineer will be responsible for the assurance and management of digital systems for new rolling stock, existing rolling stock, modifications to rolling stock and continued resilience in a connected environment.

What does the job involve?

• Be the WMT Fleet Cyber Security Engineering subject matter expert for cyber security of our fleets and represent WMT as the nominated Fleet Cyber Security Engineer for all issues relating to Cyber Security on out fleets.
• Utilise the Fleet Cyber Security Framework for WMT operated fleets, advise all relevant Information Asset Owners or nominated Cyber Security Champions and conduct periodic Fleet Cyber Security forums within WMT.
• Manage and maintain the Fleet Cyber Security and Digital Resilience Strategy for the business and deliver the Cyber Security Plan.
• Carry out and maintain the Fleet Cyber Security Risk Register framework and the remediation plan for the business. Conduct continual evaluation against risk to business outputs and update as required.
• Liaison with the Group Cyber Security Officer and other Stakeholders via the Transport UK Group Cyber Security Forum.
• Provide guidance to Projects, Programmes and BAU performing risk identification and mitigation where possible to protect the business from the likelihood and impact of a cyber-attack.
• Manage and maintain all Fleet Cyber Security publications, internal policies and Privacy Notices for the business.
• Review and respond to engineering changes, industry consultations, legislation and NTSN/RGS changes, ORR, RSSB and RAIB reports, and action changes to maintain legislation compliance and application of best practice with respect to cyber threats.
• Provide support to the Information Security Manager and Head of Security as required.
• Provide support to PIS | ASDO or other Systems Engineer as required.
• Any other duties commensurate with the grade and post and as required.

Please see the attached job description for full responsibilities list.

What skills and experience do I need to do the job?

• A minimum of HNC in a relevant Engineering subject, but ideally degree educated in engineering or similar and working towards membership of a suitable engineering institute i.e., IMechE or IET. Consideration will be given for an apprenticeship or equivalent, with appropriate experience.
• Broad technical knowledge of rail vehicles and their digital systems;
• Knowledge of UK and European legislation and standards with regards to cyber security and digital resilience;
• Knowledge of fleet related NTSN’s, Euro Norms, Railways Group Standards and all applicable standards and specifications.

What are the salary and benefits?

• Salary - £60,000 per annum + excellent benefits
• Free travel on all our trains and those of other train companies within our parent group company - for you, your partner and any dependent children
• 75% off all other train company travel tickets
• Retail discounts
• Career development opportunities

Due to the volume of applications we receive the advert may close earlier than the published closing date. Please submit your application as soon as possible to avoid missing out.

As an inclusive employer, we welcome applications from all backgrounds and ensure no-one receives less favourable treatment on the grounds of age, disability, gender, race/ethnicity, religion, belief and sexual orientation.

Applications will be considered from colleagues with 6 months experience, after completion of their probationary period and a full check of absence and disciplinary records.