Principal Security Consultant

AVEVA is creating software trusted by over 90% of leading industrial companies.

Job Title: Principal Security Consultant

Location: Cambridge or London, United Kingdom

Employment Type: Full-time, 1-year Fixed Term
- The job
- AVEVA is a global leader in industrial software, driving digital transformation and sustainability. By connecting the power of information and artificial intelligence with human insight, AVEVA enables teams to use their data to unlock new value. We call this Performance Intelligence. AVEVA’s comprehensive portfolio enables more than 20,000 industrial enterprises to engineer smarter, operate better and drive sustainable efficiency. AVEVA supports customers through a trusted ecosystem that includes 5,500 partners and 5,700 certified developers around the world. The company is headquartered in Cambridge, UK, with over 6,500 employees and ninety offices in over forty countries. Learn more at.

We take pride in our core values and the diversity of our people, valuing the unique experience and expertise that people from diverse backgrounds bring to our business. At AVEVA, we are all about Limitless possibilities. Are you?

The Principal Security Consultant is a 1-year fixed-term employee position, critical role in shaping and standing-up AVEVA’s 2nd Line of Defence Security consultancy capabilities and services.
- This role will be responsible for providing insightful knowledge and actionable recommendations to achieve AVEVA’s target operating model for security and increase the maturity of existing processes and systems. One area of focus of this 12 month work package is to improve transparency of security operations and compliance to customers. We will be improving our Trust Centre, and streamlining security engagement on customer contracts.
- The post holder will be expected to quickly integrate into the team, proactively engage with stakeholders across the business, from technical SME’s to business leadership. They will need to work independently and able to prioritise their time across multiple projects and engagements.
- Key responsibilities- Ability to Gather and Review Evidence For Compliance. Complete discovery investigations to demonstrate compliance to regulations, standards and customer requirements and present evidence in a consumable format for customers, regulators etc.-
- Stakeholder Engagement. Build and maintain trusted relationships with stakeholders to embed security risk practices into operational activities. This includes providing guidance and thought leadership on risk best practice and assurance to technical and non-technical stakeholders.
- Essential requirements- Experience. Preferable 7+ years relevant work experience in security governance, risk, and compliance with at least 3 years of working as a senior expert or manager of a significant department. Experience of fulfilling similar role in a software publishing or internet business is preferrable.- Governance. Significant experience in developing, implementing, and optimising security policies, standards, and control-sets to enable effective adaption and adoption across organisational departments and teams.- Risk Management and Assurance. Extensive experience of understanding of using threat, security control performance and business operations to independently assess residual security risk position to the end customer based on business processes and practices including product development lifecycle and supply chain.- Regulatory Compliance. Significant experience of working within a regulated environment and advising others on the principal requirements of major legislation and regulations relevant to security, and the legal and regulatory instruments relevant to the role. Experience of responding to new regulations e.g. NIS2. Knowledge of cross-border regulations, such as GDPR and EU Data Privacy rules.
- Desired skills- Organisational Skills. Highly skilled in managing multiple tasks within set deadlines whilst managing expectations of invested parties- Communication Skills. Excellent verbal and written communication skills, with the ability to convey complex information clearly and concisely to diverse audiences. Ability to communicate effectively with technical and non-technical stakeholders.- Decision making. Highly skilled in tactical decision-making with organisational impact.- Problem-solving. Able to address day-to-day challenges quickly with a focus on operational solutions. Highly skilled at deconstructing large complex problems into solutions that can be easily understood and executed by business and digital teams.

Digital Security at AVEVA

Our Digital Security team is responsible for protecting AVEVA’s digital assets and keeping the company’s data and IP secure. We’re also playing a critical role in AVEVA’s move to the cloud.

As cyber threats grow and more and more data moves into the cloud, the importance of our role is only going to grow. If you’re a collaborative problem solver that’s passi