Cyber Assurance Specialist — Regulated Nuclear Security

Sellafield; England; On-site; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Annual bonus up to 10–15%

Defined contribution pension scheme—em

30 days annual leave + bank holidays

Training & development opportunities

Right to work in the UK support

Job summary

Sellafield Ltd is expanding its Cyber Assurance capability and seeks skilled cyber professionals at multiple levels to join a regulated, safety‑critical environment. You’ll contribute to independent second‑line assurance across IT, OT, architecture and supply chain, ensuring controls remain fit for purpose and regulatory requirements are met.

You’ll gain exposure to the largest nuclear decommissioning programme in Europe, with extensive development opportunities, training, and a strong culture

Qualifications

• Experience in cyber security, audit, risk management or assurance within a regulated or technical environment.
• Degree or equivalent in cyber security, engineering, or a related field.
• Understanding of cyber security frameworks (e.g., NCSC CAF, ISO 27001, NIST CSF, NIST 800-53).
• Strong attention to detail and ability to follow structured assurance processes.
• Strong analytical, reporting, and stakeholder engagement skills.
• Working toward or holding relevant certifications (e.g., CISA, CISSP, ISO 27001 Auditor, GIAC, CRISC).

Responsibilities

• Planning, coordinating, and delivering cyber assurance activities across IT, OT, technical architecture, and supply chain environments.
• Conducting cyber control testing, evidence reviews, risk-based assessments, and control effectiveness reviews.
• Identifying control weaknesses, risks, and opportunities for improvement.
• Producing assurance reports, dashboards, and management information for governance forums and stakeholders.
• Supporting regulatory inspections, audits, and assurance reviews.
• Tracking remediation actions and validating the effectiveness of corrective measures.
• Supporting the development and continuous improvement of assurance methodologies, frameworks, and reporting processes.
• Monitoring emerging cyber threats, regulatory developments, and industry best practice.
• Building strong relationships with stakeholders across ICT, engineering, operational, and supply chain teams.
• Promoting a positive cyber risk culture across the organisation.
• For Principal Advisor roles, leading assurance programmes, developing assurance strategy, mentoring advisors, and providing expert guidance across cyber domains.

Skills

Cyber security

Audit

Risk management

Stakeholder engagement

Regulated environment

Education

Degree in cyber security, engineering, or related field

Job description

Sellafield Ltd is expanding its Cyber Assurance capability and seeks skilled cyber professionals at multiple levels to join a regulated, safety‑critical environment. You’ll contribute to independent second‑line assurance across IT, OT, architecture and supply chain, ensuring controls remain fit for purpose and regulatory requirements are met.

You’ll gain exposure to the largest nuclear decommissioning programme in Europe, with extensive development opportunities, training, and a strong culture