Cyber Compliance & Governance Lead

Sizewell C Limited; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Annual leave 28 days; 30 after 5 years

10% annual bonus

Defined contribution pension up to 7.5

Employer 15% pension contribution

Life assurance up to 8x salary

Job summary

Sizewell C Limited is seeking a Cyber Requirements & Compliance Manager to lead cyber security strategy, policy, and regulatory compliance. You will act as the primary interface with the ONR, translating complex obligations into actionable business requirements and supervising a specialist team.

Reporting to the CISO, you will drive governance, ensure controls are implemented, and collaborate with senior leaders to maintain a secure, compliant organisation across London, Leiston or Ipswich

Qualifications

• Degree qualified or equivalent in cyber security, information security, risk management or related discipline.
• Minimum of five years' experience in cyber security, information security, compliance or regulatory function.
• At least three years in a role with compliance/policy/assurance or regulatory engagement.
• Proven track record managing regulatory obligations and engaging with regulators.
• Experience conducting/overseeing assessments against ISO 27001, NCSC CAF or equivalent.
• Preparation for regulatory inspections, audits and reviews, including evidence management.
• Development and implementation of cyber security strategies, policies and governance in complex organisations.
• Professional certification such as CISSP/CISM/CRISC (holder or in progress).
• Experience in highly regulated sectors (nuclear, energy, utilities, healthcare, public sector or financial services).
• People management or functional leadership experience in cyber security/governance/compliance.

Responsibilities

• Act as the primary ONR contact on cyber security and information assurance matters.
• Identify and maintain cyber security requirements from legislation, regulation and industry expectations.
• Prepare, coordinate and submit regulatory documentation and responses.
• Support regulatory inspections, reviews and assessments; implement requirements.
• Manage regulatory findings, recommendations and remediation actions to closure.
• Lead development and continual improvement of the Cyber Security Strategy and policy framework.
• Embed cyber requirements across the organisation with stakeholders.
• Provide governance reporting and risk-based oversight of cyber compliance.

Skills

Regulatory engagement

Cyber security strategy

Policy development

Compliance monitoring

Information security governance

Stakeholder management

Security frameworks

Education

Degree in Cyber Security/Information Security/Risk Management

Tools

ISO 27001/27002

NIST CSF 2.0

NCSC CAF

Job description

Sizewell C Limited is seeking a Cyber Requirements & Compliance Manager to lead cyber security strategy, policy, and regulatory compliance. You will act as the primary interface with the ONR, translating complex obligations into actionable business requirements and supervising a specialist team.

Reporting to the CISO, you will drive governance, ensure controls are implemented, and collaborate with senior leaders to maintain a secure, compliant organisation across London, Leiston or Ipswich