Cyber Security and Information Assurance Lead

Originally named, Great British Nuclear, Great British Energy - Nuclear is an arm''s length body of the Department for Energy Security and Net Zero, dedicated to supporting the development and deployment of new nuclear technologies in Great Britain. We play a crucial role in advancing nuclear new build, ensuring the UK''s energy security and achieving net-zero carbon emissions. Great British Energy - Nuclear focuses on fostering innovation, facilitating investment, and coordinating efforts across the nuclear industry to build a resilient and sustainable energy future.

We are looking for an experienced Cyber Security and Information Assurance Lead with strong knowledge of Operational Technology (OT) to lead the development and execution of cyber security strategies for our SMR programme. This role is pivotal in securing industrial control systems (ICS), SCADA platforms, and other safety-critical OT environments across the nuclear lifecycle. You''ll ensure compliance with relevant nuclear and cyber standards while embedding security into the heart of system design and delivery.

Accountabilities & Responsibilities:
OT-Centric Cyber Strategy & Delivery

• Lead the cyber security strategy for OT systems, including ICS, SCADA, and embedded control systems.
• Ensure robust integration of cyber security into OT system architecture and lifecycle.
• Develop and maintain the Information Assurance Framework tailored to OT environments.
• Conduct OT-specific risk assessments, threat modelling, and vulnerability analysis.
• Oversee cyber resilience testing and incident response planning for OT systems.

Compliance & Standards

• Ensure alignment with nuclear and OT cyber standards, including: IEC 62443 (Industrial Automation & Control Systems Security), ISO/IEC 27001 (Information Security Management), NCSC guidance and UK Cyber Essentials and ONR Security Assessment Principles (SyAPs)

Secure by Design Leadership

• Act as the primary interface for Secure by Design (SbD) across OT systems.
• Review and approve design proposals and changes for systems critical to safety, security, and safeguards.
• Collaborate with the Design Authority and Nuclear Safety Committee (NSC) to embed SbD principles.

Stakeholder Engagement & Governance

• Lead engagement with internal engineering, IT, and regulatory teams.
• Facilitate design reviews and cyber assurance meetings focused on OT systems.

Policy, Innovation & Performance

• Develop and maintain OT-focused cyber security policies and processes.
• Drive innovation in OT cyber security, leveraging modern technologies and methodologies.

Knowledge, Skills and Experience required:

• Extensive experience in cyber security management for OT environments, ideally within nuclear, utilities, or other regulated sectors.
• Proven track record securing ICS, SCADA, PLCs, and other industrial control systems.
• Strong knowledge of OT-specific standards and regulatory frameworks.
• Experience in secure OT system design, implementation, and lifecycle management.
• Excellent communication and stakeholder management skills.
• Degree in Cyber Security, Information Assurance, Engineering, or related field.
• Eligible for UK National Security Vetting - Security Check (SC).

Desirable Attributes

• Certifications such as GICSP, CISSP, CISM, IEC 62443, ISO 27001 Lead Implementer.
• Experience in nuclear licensing and regulatory engagement.
• Familiarity with SMR technologies and digital twin environments.
• Strategic mindset with a proactive approach to emerging OT threats.
• Experience managing cyber teams and working in client-side/employer roles.
• Membership in relevant professional bodies (e.g., IET, ISACA, BCS).

Please note, this role may require candidates to obtain and maintain the appropriate level of National Security Vetting.

Please complete our short application form to apply for this role. If shortlisted, one of our Talent Attraction Leads will be in touch to discuss the position in more detail. Good luck with your application!

At GBE-N, we are committed to building an inclusive workplace where everyone can thrive. We value diversity and encourage applications from all backgrounds, including underrepresented groups. If you require any support or adjustments to help you with your application, please contact us at , and we will be happy to provide assistance.