Cyber Security and Information Assurance Lead

This job is with Great British Energy
- Nuclear, an inclusive employer and a member of my Gwork - the largest global platform for the LGBTQ+ business community. Originally named, Great British Nuclear, Great British Energy
- Nuclear is an arm's length body of the Department for Energy Security and Net Zero, dedicated to supporting the development and deployment of new nuclear technologies in Great Britain. We play a crucial role in advancing nuclear new build, ensuring the UK's energy security and achieving net-zero carbon emissions. Great British Energy
- Nuclear focuses on fostering innovation, facilitating investment, and coordinating efforts across the nuclear industry to build a resilient and sustainable energy future.

• Lead the cyber security strategy for OT systems, including ICs, SCADA, and embedded control systems. Ensure robust integration of cyber security into OT system architecture and lifecycle. Develop and maintain the Information Assurance Framework tailored to OT environments. Conduct OT-specific risk assessments, threat modelling, and vulnerability analysis. Oversee cyber resilience testing and incident response planning for OT systems.
• Compliance & Standards:
  Ensure alignment with nuclear and OT cyber standards, including: IEC 62443 (Industrial Automation & Control Systems Security), ISO/IEC 27001 (Information Security Management), NCSC guidance and UK Cyber Essentials and ONR Security Assessment Principles (SyAPs).
• Act as the primary interface for Secure by Design (SbD) across OT systems. Review and approve design proposals and changes for systems critical to safety, security, and safeguards. Collaborate with the Design Authority and Nuclear Safety Committee (NSC) to embed SbD principles.
• Stakeholder Engagement & Governance:
  Lead engagement with internal engineering, IT, and regulatory teams. Facilitate design reviews and cyber assurance meetings focused on OT systems.
• Policy, Innovation & Performance:
  Develop and maintain OT-focused cyber security policies and processes. Drive innovation in OT cyber security, leveraging modern technologies and methodologies.

• Extensive experience in cyber security management for OT environments, ideally within nuclear, utilities, or other regulated sectors.
• Proven track record securing PLCs and other industrial control systems.
• Strong knowledge of OT-specific standards and regulatory frameworks.
• Experience in secure OT system design, implementation, and lifecycle management.
• Excellent communication and stakeholder management skills.
• Degree in Cyber Security, Information Assurance, Engineering, or related field.
• Eligible for UK National Security Vetting
  - Security Check (SC).

• Certifications such as GICSP, CISSP, CISM, IEC 62443, ISO 27001 Lead Implementer.
• Experience in nuclear licensing and regulatory engagement.
• Familiarity with SMR technologies and digital twin environments.
• Strategic mindset with a proactive approach to emerging OT threats.
• Experience managing cyber teams and working in client-side/employer roles.
• Membership in relevant professional bodies (e.g., IET, ISACA, BCS).
• Please note, this role may require candidates to obtain and maintain the appropriate level of National Security Vetting.

Salary:
Up to £93400 per annum.

At GBE-N, we are committed to building an inclusive workplace where everyone can thrive.

We value diversity and encourage applications from all backgrounds, including underrepresented groups.

If you require any support or adjustments to help you with your application, please contact us at , and we will be happy to provide assistance.