Cyber Controls & Governance Specialist

Sizewell C; Greater London; Hybrid; GBP 67,000 - 68,000; Full time

Benefits offered by this job

Annual leave

5% annual bonus

Pension contributions

Life assurance

Job summary

Sizewell C is seeking a Cyber Controls Specialist to maintain and improve our cyber security controls environment. The role reports to the Cyber Controls Manager and focuses on documenting controls, aligning to risks, and ensuring evidence is in place for audits.

You will work with cyber security, digital and risk teams to ensure controls are effective, auditable, and fit for purpose. A background in governance, risk and controls is essential.

Qualifications

• Good understanding of cyber security controls and governance principles.
• Working knowledge of frameworks such as ISO 27001.
• Understanding of the relationship between cyber risks, risk treatments and controls.
• Strong attention to detail with auditable documentation.
• Good written and verbal communication for governance discussions.
• Understanding of audit requirements and evidence management.

Responsibilities

• Maintain the cyber security controls library with accurate records.
• Manage additions, amendments and retirements via governance processes.
• Review controls documentation regularly to identify gaps or missing evidence.
• Maintain control taxonomy aligned to standards and ensure audit trails.
• Keep mappings between risk register and controls library current.
• Support evidence packs and audit materials for regulatory inspections.
• Monitor remediation actions and escalate overdue items.
• Engage with control owners and stakeholders to keep information accurate.

Skills

Cyber security controls

ISO 27001

Risk management

Documentation standards

Governance reporting

Audit requirements

Stakeholder collaboration

Education

Degree in Cyber Security/Info Security/IT/CS

Job description

Sizewell C is seeking a Cyber Controls Specialist to maintain and improve our cyber security controls environment. The role reports to the Cyber Controls Manager and focuses on documenting controls, aligning to risks, and ensuring evidence is in place for audits.

You will work with cyber security, digital and risk teams to ensure controls are effective, auditable, and fit for purpose. A background in governance, risk and controls is essential.