Cyber Security and Information Assurance Lead

<p class="text-muted mb-3">Originally named, Great British Nuclear, Great British Energy - Nuclear is an arm's length body of the Department for Energy Security and Net Zero, dedicated to supporting the development and deployment of new nuclear technologies in Great Britain. We play a crucial role in advancing nuclear new build, ensuring the UK's energy security and achieving net-zero carbon emissions. Great British Energy - Nuclear focuses on fostering innovation, facilitating investment, and coordinating efforts across the nuclear industry to build a resilient and sustainable energy future.</p>

<p class="text-muted mb-3">We are looking for an experienced Cyber Security and Information Assurance Lead with strong knowledge of Operational Technology (OT) to lead the development and execution of cyber security strategies for our SMR programme. This role is pivotal in securing industrial control systems (ICS), SCADA platforms, and other safety-critical OT environments across the nuclear lifecycle. You'll ensure compliance with relevant nuclear and cyber standards while embedding security into the heart of system design and delivery.</p>

<p class="text-muted mb-3">Accountabilities & Responsibilities:</p>

<p class="text-muted mb-3">OT-Centric Cyber Strategy & Delivery</p>

<p class="text-muted mb-3">Lead the cyber security strategy for OT systems, including ICS, SCADA, and embedded control systems.</p>

<p class="text-muted mb-3">Ensure robust integration of cyber security into OT system architecture and lifecycle.</p>

<p class="text-muted mb-3">Develop and maintain the Information Assurance Framework tailored to OT environments.</p>

<p class="text-muted mb-3">Conduct OT-specific risk assessments, threat modelling, and vulnerability analysis.</p>

<p class="text-muted mb-3">Oversee cyber resilience testing and incident response planning for OT systems.Compliance & Standards</p>

<p class="text-muted mb-3">Ensure alignment with nuclear and OT cyber standards, including: IEC 62443 (Industrial Automation & Control Systems Security), ISO/IEC 27001 (Information Security Management), NCSC guidance and UK Cyber Essentials and ONR Security Assessment Principles (SyAPs)Secure by Design Leadership</p>

<p class="text-muted mb-3">Act as the primary interface for Secure by Design (SbD) across OT systems.</p>

<p class="text-muted mb-3">Review and approve design proposals and changes for systems critical to safety, security, and safeguards.</p>

<p class="text-muted mb-3">Collaborate with the Design Authority and Nuclear Safety Committee (NSC) to embed SbD principles.Stakeholder Engagement & Governance</p>

<p class="text-muted mb-3">Lead engagement with internal engineering, IT, and regulatory teams.</p>

<p class="text-muted mb-3">Facilitate design reviews and cyber assurance meetings focused on OT systems.Policy, Innovation & Performance</p>

<p class="text-muted mb-3">Develop and maintain OT-focused cyber security policies and processes.</p>

<p class="text-muted mb-3">Drive innovation in OT cyber security, leveraging modern technologies and methodologies.Knowledge,</p>

<h5 class="fw-bold text-success mt-4 mb-3">Skills and Experience required</h5>

<p class="text-muted mb-3">Extensive experience in cyber security management for OT environments, ideally within nuclear, utilities, or other regulated sectors.</p>

<p class="text-muted mb-3">Proven track record securing ICS, SCADA, PLCs, and other industrial control systems.</p>

<p class="text-muted mb-3">Strong knowledge of OT-specific standards and regulatory frameworks.</p>

<p class="text-muted mb-3">Experience in secure OT system design, implementation, and lifecycle management.</p>

<p class="text-muted mb-3">Excellent communication and stakeholder management skills.</p>

<p class="text-muted mb-3">Degree in Cyber Security, Information Assurance, Engineering, or related field.</p>

<p class="text-muted mb-3">Eligible for UK National Security Vetting - Security Check (SC).Desirable Attributes</p>

<p class="text-muted mb-3">Certifications such as GICSP, CISSP, CISM, IEC 62443, ISO 27001 Lead Implementer.</p>

<p class="text-muted mb-3">Experience in nuclear licensing and regulatory engagement.</p>

<p class="text-muted mb-3">Familiarity with SMR technologies and digital twin environments.</p>

<p class="text-muted mb-3">Strategic mindset with a proactive approach to emerging OT threats.</p>

<p class="text-muted mb-3">Experience managing cyber teams and working in client-side/employer roles.</p>

<p class="text-muted mb-3">Membership in relevant professional bodies (e.g., IET, ISACA, BCS).Please note, this role may require candidates to obtain and maintain the appropriate level of National Security Vetting.</p>

<p class="text-muted mb-3">Please complete our short application form to apply for this role. If shortlisted, one of our Talent Attraction Leads will be in touch to discuss the position in more detail. Good luck with your application!</p>

<p class="text-muted mb-3">At GBE-N, we are committed to building an inclusive workplace where everyone can thrive. We value diversity and encourage applications from all backgrounds, including underrepresented groups. If you require any support or adjustments to help you with your application, please contact us at , and we will be happy to provide assistance</p>