Cybersecurity Consultant

Shape a future with purpose at Arup in Dublin, Cork, Galway, Belfast. 

“Designing and governing cybersecurity and resilience solutions in the built environment”

Arup’s purpose, shared values and collaborative approach have set us apart for over 80 years, guiding how we shape a better world.

Arup is at the forefront of smart and connected building, city and transport technology, and our cyber-advisory specialists have expertise in Operational Technology (OT), Industrial Control Systems (ICS) and IoT technology. We advise clients on risk and vulnerability analysis and propose mitigation strategies that enhance infrastructure resilience and safety.

Arup’s Total Design approach is a holistic, human-centred methodology that integrates disciplines, engineering, architecture, planning, digital and advisory into a unified, collaborative process. For cybersecurity, this means working alongside project teams to ensure security and resilience requirements are considered early and embedded throughout design, delivery and operation.

The Opportunity

This role supports the delivery of Cybersecurity Advisory Services across Ireland, Europe and the wider global region, with a strong focus on OT/ICS environments.

You will work on major infrastructure programmes across transport, energy, water, and buildings. The role involves supporting cyber risk, governance, and assurance activities, helping clients define practical security requirements and embed cybersecurity into design and delivery.

Working within multidisciplinary teams, you will contribute to secure, resilient outcomes using recognised standards and a risk-based approach. You will also support client engagement and contribute to proposals and delivery planning.

Responsibilities

The candidate will be expected to:

·         Deliver high-quality cyber advisory services to Arup projects and clients

·         Support cybersecurity risk, gap, and assurance assessments

·         Contribute to OT/ICS security requirements, architectures, and governance outputs

·         Engage with stakeholders to understand risks and provide clear recommendations

·         Support supplier assurance, documentation reviews, and audit readiness

·         Produce structured deliverables (risk registers, requirements, reports, roadmaps, specifications)

·         Support proposals, scope development, and delivery planning

·         Collaborate with multidisciplinary teams to embed cybersecurity into project outcomes

The Person

Arup is looking for a technically capable cybersecurity consultant with experience in cybersecurity risk-based advisory and assurance, who communicates clearly and enjoys working in multidisciplinary teams supporting the built environment and connected infrastructure.

Required qualifications

• A Degree-level qualification (or equivalent experience) in cybersecurity, information security, computer science, engineering, technology risk, or a related discipline.

Required experience

• 4+ years of experience in cybersecurity, technology risk, security assurance, Governance Rick and Compliance (GRC), or related consulting / in-house roles.
• Experience contributing to client deliverables such as security requirements, risk assessments, gap assessments, roadmaps and assurance reporting.
• Familiarity with frameworks/standards such as ISO/IEC 27001, NIST CSF, IEC 62443, or NIS 2.
• Strong written and verbal communication skills; able to explain security topics to technical and non-technical stakeholders.
• Ability to manage tasks to time and quality, working across multiple priorities.

Certifications (preferred / working towards)

A relevant cybersecurity certification (or demonstrable progress towards one), for example:

• CISSP, CISM, CRISC, CISA, CCSP, IEC 62443
• ISO/IEC 27001 Lead Implementer / Lead Auditor

Desirable

• Exposure to cyber-physical environments such as OT/ICS, IoT, smart buildings, electronic security systems, or operationally critical services.
• Experience supporting security architecture, security assurance testing, or remediation planning.
• Sector exposure (e.g., transport, energy, water, property) is helpful but not essential.
• Membership of a relevant professional body (e.g., BCS, CIISec, IRM, IET) or local equivalent.
• Eligibility to complete client-required background checks / clearances where applicable.

Why Arup?

At Arup, we believe in rewarding our members for their contributions to our shared success. As a trust-owned company, we have the freedom to pursue meaningful work that aligns with our purpose and values, including a global profit share programme.

Benefits that work for you include professional growth and development, global collaboration opportunities, wellbeing support, and an inclusive culture where everyone is encouraged to bring their whole self to work.

Do you want to join us in shaping a better world?

Apply using the "Apply for Job" button above