Cyber Security Specialist

Job Title: Cyber Security Specialist

Location: Doncaster

Salary: £70,000 - £75,000 per year

Job Type: Full Time, 12 Month Fixed Term Contract

At DB Cargo UK, we keep the UK moving. As the UK's leading rail freight operator, we provide safe, reliable and sustainable rail logistics services that support businesses, communities and the wider economy. We are investing in our technology, resilience and cyber security capability and are looking for an experienced Cyber Security Specialist to join us on a 12 month fixed term contract.

This is a key role within our IT Governance & Security function. Acting as DB Cargo UK's cyber security subject matter expert, you will lead cyber security governance, operations, compliance and resilience activities across a diverse portfolio of business-critical applications, cloud services and operational railway systems. You will help ensure cyber security enables business performance, supports innovation and protects our people, customers and operations.

Please note that successful candidates will need to go through national security vetting.

What You Will Be Doing:

Lead and continually improve cyber security governance, risk, compliance and resilience activities across the organisation.
Own and maintain the Information Security Management System (ISMS), policies, standards and governance processes.
Lead compliance with NIS Regulations, GDPR and DB Group security requirements.
Manage cyber security operations including threat monitoring, incident response, threat intelligence and vulnerability management.
Develop Microsoft Sentinel, Microsoft Defender XDR and associated security monitoring capabilities.
Provide governance across Azure, AWS, Microsoft 365, Entra ID and Intune environments.
Lead information protection, DLP, retention, eDiscovery and security assurance activities.
Support customer assurance, procurement reviews, supplier risk assessments and tender submissions.
Provide cyber security leadership for ERTMS and ETCS transformation programmes.
Deliver cyber awareness initiatives and senior leadership reporting.What We Are Looking For:

Demonstrable experience in cyber security, information security or IT risk management.
Experience of security operations, incident response and security monitoring.
Knowledge of governance, risk management, compliance frameworks and assurance processes.
Experience securing cloud, endpoint and identity platforms, ideally within Microsoft environments.
Excellent stakeholder engagement and communication skills.
Ability to balance security, operational requirements and commercial priorities.
Degree in IT, Cyber Security or a related field is desirable.
CISSP, CISM, ISO27001 or Microsoft Security certifications are advantageous.Why Join Us?

You will have the opportunity to shape cyber security strategy and influence decision making across a critical national infrastructure organisation. We are looking for someone who combines strong technical expertise with sound commercial awareness, recognising that the best cyber security solutions protect people, support operational delivery and enable long-term business success.

What's In It For You?

Defined Contribution Pension Scheme with employer contributions of up to 10%.
Health Cash Plan Scheme.
Employee Benefits Portal with discounts across a wide range of retailers and services.
Annual Leave Purchase Scheme.
Cycle to Work Scheme.
Charge & Go EV Vehicle Scheme.
Employee Recognition Programme.
Access to learning, development and career progression opportunities.Our Commitment:

DB Cargo UK is committed to creating an inclusive workplace where everyone is valued, respected and able to thrive. We welcome applications from candidates of all backgrounds and are committed to building a diverse workforce that reflects the communities we serve.

Please click APPLY to send your CV for this role.

Candidates with experience of: Cyber Security Specialist, Cybersecurity Specialist, Information Security Specialist, Cyber Security Analyst, Senior Cyber Security Analyst, Information Security Analyst, Senior Information Security Analyst, Cyber Security Engineer, Information Security Engineer, Cyber Security Consultant, Information Security Consultant, Cyber Security Manager, Information Security Manager, Cyber Security Governance Specialist, Information Security Governance Analyst, Cyber Security Risk Analyst, may also be considered for this role
Only candidates based in UK and eligible to work in UK are allowed