Principal Security Specialist

Ofgem is Great Britain's independent energy regulator - a critical role that puts us at the forefront of cyber security, ensuring public data is safe and secure and that we set the standard for the energy industry. We're looking for a Principal Security Specialist (IT/OT) to join and lead the design, assessment, and implementation of innovative security solutions and associated guidance aimed at protecting critical systems.

This work aligns with our core mission: to deliver a fair, sustainable, and secure energy future.

This a permanent role within our Cyber Guidance & Monitoring (G&M) team, which sits within Ofgem's Cyber and Emerging Technologies Directorate. The G&M team focus on ensuring resilience is built into systems run by energy operators who control the UK's energy infrastructure. We do this as part of our role as Joint Competent Authority ("CA") for the Network and Information Systems Regulations 2018 ("NIS Regulations").

We provide 1-2-1 and sector-wide advice and guidance to operators throughout their security journeys, seeking to build greater collective industry resilience. We are very fortunate to be able to help influence and shape the security and resilience of a whole sector (specifically, the Downstream Gas and Electricity sector).

As an expert in the field, you'll lead high-profile security improvement projects, engaging with a wide range of internal and external stakeholders to shape security posture, implementing best practice in line with National Cyber Security Centre (NCSC) guidance. This is a chance to be at the forefront of innovation and meaningful change, championing secure by design principles and influencing digital strategies that benefit millions.

This role provides a rare opportunity to combine technical expertise with strategic leadership - and it's an exciting time to join us!

At Ofgem, we offer more than just a job - we provide a supportive and flexible working environment designed to help you thrive. With hybrid working arrangements, newly refurbished offices in central London, Glasgow, or Cardiff, and a generous rewards package that includes excellent professional learning and development opportunities (including access to potential higher education funding - subject to review), you'll find everything you need to excel both professionally and personally.

For further details on the role and on our hybrid working arrangement, please read the candidate pack and other documents below.

Person specification

Please ensure you demonstrate clearly, within your supporting statement, how you meet each of the essential criteria. In the event of receiving a large number of applications, an initial sift may take place on just the lead criteria indicated in the essential criteria.

• Demonstrable experience in a leading role managing technical security risk and delivering security improvement plans within complex organisational, operational, or critical infrastructure environments. (LEAD)
• Proven experience providing security advice, guidance, challenge, and assurance to stakeholders responsible for critical systems, business services, or infrastructure.
• Experience applying security frameworks, risk management methodologies, and technical standards (e.g. NCSC CAF, NIST CSF, ISO 27001, CIS Controls, IEC/ISA 62443) to assess and improve organisational resilience.
• Strong stakeholder management and communication skills, including the ability to influence decision-making and communicate complex security risks to both technical and non-technical audiences.

Behaviours

We'll assess you against these behaviours during the selection process:

• Seeing the Big Picture
• Changing and Improving
• Making Effective Decisions
• Communicating and Influencing

Alongside your salary of £63,443, OFGEM…