Band 3 Cyber Security and Operational Resilience Inspector

Office for Nuclear Regulation; Cheltenham; Hybrid; GBP 58,000 - 69,000; Full time

Job summary

A government regulatory body in the UK is seeking a Cyber Security Specialist responsible for assessing cyber security arrangements, conducting inspections, and developing policy. The ideal candidate will have expertise in cyber defence and information risk management, along with strong communication skills. The role offers a salary of £68,954 plus additional pension contributions, with opportunities for development in a hybrid work environment.

Benefits

Civil Service Defined Benefit Pension

Learning and development opportunities

Flexible working options

Inclusive culture

Qualifications

• Extensive understanding of information risk management in a nuclear environment.
• Ability to deliver concise written reports to tight deadlines.
• Experience managing security risks in a regulated environment.

Responsibilities

• Assess duty holders' cyber security arrangements.
• Conduct regulatory inspections to ensure effective cyber security implementation.
• Contribute to regulatory policy development.

Skills

Cyber defence

Information risk management

Communication skills

Project management

Analytical skills

Job description

Overview

ONR is an arms length body of the Department for Work and Pensions. As the UK's independent nuclear regulator, our mission is vital to safety and security, protecting society by securing safe operations at nuclear facilities across the nation. This is an exciting role critical to the decarbonisation of the UK's economy, our national defence, and the decommissioning of our nuclear legacy. A career with ONR will provide opportunities to lead and shape the future use of nuclear technology.

Role

Effective cyber security is increasingly important as modern technology and interconnected devices become a fundamental part of everyday life. It is vital to protect the devices and services we access online and at work from harm. Our Cyber Security and Operational Resilience specialism ensures the civil nuclear sector protects sensitive information and safeguards the systems essential to deliver key outputs and functions. This is achieved primarily through:

• Assessment of duty holders\' cyber security arrangements to provide confidence that risks are being adequately managed.
• Undertaking regulatory inspections with duty holders to ensure the effective implementation of technical cyber security controls to protect essential functions and the systems that support them (including information technology, operational technology, and sensitive nuclear information).
• Conducting inspections of facilities across the nuclear supply chain to ensure cyber security risks are effectively managed.
• Contributing to the development of regulatory policy and influencing the development of good practice both nationally and internationally.
• Liaison with other regulators (including those in security and safety disciplines) and various Government security and intelligence agencies, including coordination of the sector\'s response to high profile cyber security events and incidents.
• Representing ONR at security events and meetings, such as those organised by the International Atomic Energy Agency, the World Institute for Nuclear Security, European Nuclear Security Regulators\' Association, the UK Cyber Security Council, and those directly by the UK Nuclear industry.

Training to expand and deepen knowledge and experience in specific nuclear, cyber security, operational resilience, information assurance and regulatory topics will be given throughout the successful candidate\'s career; however, successful applicants will already have demonstrable experience in the field. As experience of regulating nuclear security increases, inspectors are given the opportunity to progress and achieve promotion.

Qualifications and Suitability Statement

+ A suitability statement (maximum of 800 words) highlighting how you meet the essential skills and experience required for the role, which will be used at shortlisting in conjunction with your CV. If applicable, highlight any experience under desirable skills and experience within the application form. During the selection process we will base decisions on evidence provided. If shortlisted, you will be invited to a technical/competency-based interview.

AI Tools & Platforms: During the application process applicants are allowed to use AI tools to support CVs and statements. Ensure all information is truthful and verifiable, including attributing AI-generated content. All information will be assessed at the interview stage. When providing CVs, upload text-based CVs with no graphics or pictures to enable anonymisation.

Essential Skills and Experience

• Broad and deep expertise in technical areas such as cyber defence, detection, response, resilience and recovery; and in personnel/procedural areas related to information risk management and cyber security.
• Extensive understanding of information risk management in a nuclear or high-hazard environment.
• Knowledge of current cyber threats and security vulnerabilities.
• Understanding of government protective security procedures and capable of making balanced judgments on adequacy.
• Understanding of operators of essential services/critical national infrastructure in relation to cyber resilience.
• Proficiency in managing security risks in a regulated environment.
• Leadership in assessing cyber security arrangements, audits, assurance activities and/or compliance inspections.
• Ability to deliver concise, high-quality written reports to tight deadlines.
• Sound judgement and decision-making with the ability to analyse information, evaluate options, and provide risk-based recommendations.
• Strong verbal and written communication skills, capable of presenting complex technical matters to non-experts.
• Strong influencing skills and the ability to collaborate with stakeholders with interpersonal sensitivity and assertiveness.
• Experience in managing projects with planning, prioritisation and timely delivery to high standards.
• Evidence of professional behaviours in delivery of roles.

Line Management

None currently, but there could be future expectations to manage staff and mentor graduates and apprentices.

Work with Us and Inclusion

We welcome applicants from all backgrounds. We value contributions regardless of age, gender, race, ethnicity, disability, sexual orientation, social background, religion, or belief. Our values are supportive, open-minded, fair and accountable, and we invest in our people to build capability, resilience and wellbeing, underpinned by inclusion and excellence.

Inclusion: We are committed to being an inclusive employer and will consider reasonable adjustments to ensure the recruitment process is accessible. Please contact [e-mail] to discuss further. We offer an interview to disabled applicants who meet the minimum criteria under the guaranteed interview scheme and a veterans guaranteed interview scheme for eligible applicants.

Security clearance: The successful candidate must hold or achieve and retain National Security Vetting clearance at DV level. Location and travel: The post may be based at Bootle, Cheltenham, or London, with travel across the UK and occasionally abroad. A full driving licence is required unless reasonable adjustments can be made. ONR operates hybrid working with some time in the office. Salary and benefits: £68,954 salary plus £19,975 towards Civil Service Defined Benefit Pension. Benefits include learning and development, flexible working options, an inclusive culture, and a civil service pension.