VGC Group

About the Company

The VGC Group is the leading recruitment partner to the UK infrastructure industry – ‘uniting talent and expertise to deliver success for all’. If you are looking for a long-term career with a company that cares about its staff, get in touch on 08000 478118 or recruitment@vgcgroup.co.uk We are one of the largest skilled labour and staff suppliers to the UK’s construction and rail companies, and we also undertake rail and construction contracts. We operate in all types of civil engineering environments including roads and bridges, airports, nuclear facilities, utilities, and mainline and underground rail. We deliver on time and on budget. We collaborate with each other and with partners and even competitors so we can go beyond our clients’ expectations. VGC is all about people – our own and the many clients that we support. Our values are: - We achieve potential. - We deliver on our promises - We look after each other. Equality, diversity and inclusion, and strategic investment in the skills development of our people, even in tough trading conditions, are part of our business - and intrinsic to our corporate social responsibility. Because different parts of the VGC Group work together, we have the skills, knowledge and competence to provide a service unmatched by any other company. The VGC Group is made up of: VGC Labour Solutions - trades and labour recruitment VGC Personnel - professional, technical and managerial recruitment VGC Projects - mainline rail and London Underground contractor, providing building and civil engineering contracts VGC Training - training and competence management services Cole Hire - vehicle rental Specialties: Rail, civil engineering, recruitment, contracting, M&E, signalling, utilities, nuclear, vehicle rental, London Underground, construction, trades, labour, workforce, personnel, jobs See www.vgcgroup.co.uk for more information.

Listed Jobs

Company Name

VGC Group

Job Title

Cyber Security Engineer

Job Description

**Job Title** Senior Cyber Security Engineer (Assurance) **Role Summary** Lead cyber‑security design, risk assessment, testing and assurance for operational technology (OT) solutions in a rail infrastructure context. Deliver end‑to‑end security across the project lifecycle, from bid to commissioning and support, ensuring compliance with IEC 62443, CENELEC, NIS, NIS2, EU CRA, TS 50701 and related standards. **Expectations** - Provide technical leadership and consultancy on security architecture, risk management and testing. - Maintain and enforce security requirements and documentation. - Mentor and develop junior engineers. - Communicate effectively with internal teams and external stakeholders, influencing decisions and ensuring stakeholder alignment. - Keep abreast of evolving threats, technologies and regulatory requirements, applying them to current and future projects. **Key Responsibilities** - Specify and manage security requirements for projects, ensuring alignment with international and regional standards. - Conduct threat and risk analyses, define counter‑measures and validate risk acceptance. - Design system security zoning and protection architectures. - Develop and implement security test strategies, including penetration testing and verification of security controls. - Evaluate third‑party components against security requirements. - Compile, review, and archive security artefacts throughout development. - Represent security engineering in milestone and stage‑gate reviews. - Capture and disseminate lessons learned to drive continuous improvement. - Respond to security vulnerabilities and incidents in coordination with incident response teams. **Required Skills** - Proven leadership in OT cyber‑security engineering. - Deep knowledge of IEC 62443 and CENELEC standards. - Experience with NIS/NIS2, EU CRA, TS 50701 compliance. - Expertise in threat & risk assessment, security architecture, zoning, and counter‑measure design. - Proficiency in security testing (V&V, penetration testing). - Strong communication, stakeholder influence, and mentoring abilities. **Required Education & Certifications** - Bachelor’s degree (or equivalent) in engineering, science, or a numerate discipline. - Professional certifications: CISSP, CSSLP, or CESG CCP (at least one required). ---

Chippenham, United kingdom

Hybrid

16-01-2026