Senior Security Consultant

About Indra Group UK & Ireland

Indra is a leading global technology and consulting company, and a trusted technological partner for the core business operations of its clients worldwide. It stands at the forefront of key sectors including Transport, Defence, Air Traffic Management and Space, alongside advanced Information Technology services delivered through Minsait, and cutting‑edge capabilities in Sovereign AI, Cybersecurity, and Cyberdefence via Indra Mind. The company's business model is built around a comprehensive portfolio of proprietary products, combining strong innovation with a high‑value focus for customers.

With more than 2,500 projects implemented across 50 countries and over 100 cities, Indra is a global benchmark in innovative transportation and mobility solutions. It is recognised as one of the world's top three companies in public transportation management systems. Indra's technology supports the daily journeys of over 78 million people, helping to reduce more than 10 million tonnes of CO₂ emissions annually, and helping save nearly 3,000 lives through improved traffic management and road safety.

Indra Group is paving the way to a more secure and better‑connected future through innovative solutions, trusted relationships and the very best talent. Sustainability sits at the heart of its strategy and culture, driving efforts to address current and future social and environmental challenges. In the 2024 financial year, Indra achieved revenues of €5.5 billion, over 60,000 professionals, maintained a local presence in 46 countries, and operated across more than 140 countries worldwide.

Transport for London (TfL) has awarded Indra a long‑term contract to operate, develop, enhance and expand ticketing and access control systems across London's transport network through to 2034, with extension options to 2039. This programme covers the maintenance, operation and evolution of a large‑scale, complex ecosystem, including turnstiles, validators, ticket machines, sales terminals, back‑office systems, payment gateways, IT infrastructure and cybersecurity that supports over 8.6 million daily journeys.

Therefore, Indra will become TfL's strategic technology partner to guarantee the operation and evolution of the world's largest and most sophisticated ticketing system. Following a transition period of approximately two years, Indra will serve as the sole provider across the network that includes more than 8,500 buses, nearly 400 Underground stations, around 300 rail stations (Overground, DLR, Elizabeth Line and suburban services), 4,000 Oyster Card outlets, seven customer service centres, and 24 river boat boarding points.

Drawing on over 30 years of experience in urban public transport solutions, Indra will manage and evolve all aspects of the system. The project also envisages, in partnership with TfL, the implementation of new technologies to develop the system, make it more efficient and automate key processes; in short, to jointly create the next generation of the ticketing system for London.

The Senior Security Consultant plays a pivotal role in shaping and executing the organisation's information security strategy, governance and risk management activities to protect services, systems and data. The role is responsible for implementing security frameworks, leading risk and incident management, ensuring regulatory compliance, managing third‑party security, and driving continuous improvement through monitoring, reporting and awareness initiatives.

• Define, implement and monitor corporate information security strategies, objectives and governance frameworks.
• Design and implement information security management systems and security master plans.
• Lead risk management activities, including risk identification, assessment, treatment and reporting.
• Define cybersecurity action plans and oversee their execution.
• Ensure the protection of services, business processes and information assets.
• Oversee security monitoring, incident investigation and response activities, including coordination of disciplinary or legal actions where required.
• Manage and…