Senior Associate, Technical Advisor, Security & Resilience

Closing Date: 18/09/2026

Group:
Infrastructure and Connectivity Group

Management Level: Senior Associate

Job Type: Permanent

Please note that the advert will close at 00:01 on Friday 18 September, so we advise getting your application in by no later than midnight on Thursday 17 September.

As the UK's communications regulator, we're delivering vital work that helps keep the UK connected and shapes the future of how we'll stay connected with each other.

Our work covers everything from phones and broadband, through to TV, radio, the postal service, and wireless devices. We're also taking on the challenge of making the online world a safer place. And we need people of all backgrounds, skill sets, and experiences to help us achieve our goal of making communications work for everyone.

The purpose of the Infrastructure and Connectivity Group is to advance a better-connected UK so people and businesses can participate in and benefit from a digital society. We do this by helping deliver the connectivity that supports the services people and businesses want, promoting competition and investment in the industries we oversee and helping make sure that communications networks are secure and resilient.

Our work helps drive innovation, deliver consumer choice and value, and makes sure people and businesses get the services they need. Technology in our sectors changes fast and there are always new and exciting issues to explore. In a time of significant digital disruption, we support economic growth by ensuring that our communications infrastructure meets the country's needs and enables a wide range of digital services.

Working closely with other members of the Security & Resilience Supervision team, you will be responsible for the continuous development and implementation of the regulatory supervision over telecoms providers. This role will require you to have in depth knowledge of telecoms providers and demonstrate technical insights to help develop and implement guidance on network topology, security, operations and processes so that Ofcom's policy position and approach to the regulation of the security requirements is effective appropriate and measurable.

This role will require you to provide technical insights and support the delivery of our supervision of telecoms providers' obligations against the Telecommunications Security Act (2021), or the "TSA".

In the light of the increasing economic and social significance of communications and services, the changing technological and communications landscape, and the evolving and increasing level of threats, the security and resilience of fixed and mobile networks and services is becoming more important. We are taking proactive steps to ensure that they are designed and operated to meet the needs and expectations of users.

• Support the development and implementation of a supervisory program promoting the adoption of the new legislation underpinning the TSA. This will include maintaining and supporting a compliance monitoring regime that will provide annual report to the SOS (Secretary of State) for DSIT. The program includes a variety of engagements with telecoms providers to gain a clear understanding of their current and future implementation of measures to comply with their obligations in the TSA.
• Work with other members of the team, responding to and assessing telecoms and digital infrastructure company responses to security and resilience incidents that occur in their infrastructure which are reported to Ofcom. Ensuring enough information is present to deliver a sound security risk assessment.
• Work with colleagues in Ofcom the Enforcement team to provide technical support in relation to any enforcement activity.
• Work with industry stakeholders, Government and other relevant agencies to ensure policy goals are aligned and effectively coordinated.
• To provide (when required) assistance to other teams within Ofcom including our policy teams and for our other responsibilities within the Security & Resilience Supervision Team. This includes our regulatory obligations for the Network & Information Systems (NIS) regulation of the Digital Infrastructure sector and our upcoming remit for Data Centres

• Experience in security assurance and risk management within telecommunications or a related technology environment, including involvement in audits, remediation activities, and assurance monitoring.
• Demonstrated ability to assess technical vulnerabilities and apply appropriate controls, with exposure to cyber security risk management practices, including risk assessments, or threat modelling.
• An understanding of areas such as vendor risk and broader security considerations (including human and physical aspects).
• Awareness of cyber security threats within telecommunications o