Cyber Incident Co-ordinator

At Sellafield Ltd, we are harnessing our expertise; bringing together world-class skills and innovative technology to solve complex nuclear, infrastructure, and engineering challenges. By joining Sellafield Ltd, you join an amazing team of people, from all walks of life, where you can thrive in a connected, considerate culture of innovation, collaboration, and community; and play a significant part in the UK’s sustainable nuclear future.

This role is based at Sellafield Ltd associated workplaces in the West Cumbria or Warrington area.

To deliver, evolve and implement the Sellafield Ltd approach to managing cyber incidents, including processes, roles and escalation paths across Sellafield Ltd. The role will be responsible for following best practices and incident preparedness throughout the organisation, aligning with regulatory frameworks such as the Cyber Assessment Framework (CAF). This includes working collaboratively across Cyber Security, HR, Finance, Legal and Communication teams to deliver enterprise-wide outcomes.

• Deliver the Cyber Incident Management capability across Sellafield Ltd, aligned to CAF Objective D and the broader Cyber Security strategy.
• Aid in the development and implementation of the Cyber Incident Management Plan (CIMP). Focused on a site wide co-ordinated response.
• Drive and facilitate the evaluation of Incident preparedness programme to ensure effectiveness and alignment with business needs.
• Co-ordinate with HR, Training, Communications, Finance and the wider organisation in educating understanding and rehearsing roles & responsibilities during a cyber incident.
• Designing and facilitating development programmes to enhance incident preparedness across Sellafield Ltd.
• Coordinate and enhance post incident reviews for cyber incidents, ensuring continuous improvement.
• Perform Cyber Incident Exercises (CIE) to various audiences to enhance incident preparedness.
• Act as an incident commander when an incident arises, bringing the necessary resources together to drive incident resolution.
• Facilitate and conduct post incident reviews for continuous improvement.
• Act as an SME within the Incident management and cyber operations consultancy pillar across Sellafield Ltd.
• Contribute to the enhancement of the CIR capability.
• Facilitate relationships with external providers and institutions to support the capability pipeline and training delivery.
• Represent CS&IA in internal forums, promoting best practice and continuous improvement.

Authorities & Dimensions

• Operates under the direction of the Incident Response Team Lead.
• Influences stakeholders across Cyber Security, HR, and the wider organisation.
• Coordinate the Sellafield Ltd incident management process, working with HR, Communications, Finance and the wider organisation.

Essential

Skills:

• Experience in cyber incident response or cyber operations, with exposure to incident preparedness programmes.
• Understanding of cyber security principles, particularly within cyber operations and incident response.
• Excellent communication and stakeholder engagement skills.
• Experience in designing and delivering training and exercising content across varied formats.
• Familiarity with regulatory frameworks such as the CAF.
• Demonstrable experience of working in complex organisations with diverse stakeholder groups.
• Degree or equivalent experience in Cyber Security, Computer Science, or a related field.

Desirable

Skills:

• Professional certifications such as SANS Cyber Incident Management, or similar.
• Experience working in or with nuclear or regulated industries.
• Understanding of Sellafield Ltd’s operations and ICT estate.
• Experience in capability development, workforce planning, and strategic resource…