Cyber Controls Specialist: Governance & Assurance

Sizewell C Limited; Greater London; Hybrid; GBP 60,000 - 80,000; Full time

Benefits offered by this job

Annual leave 28 days

Bonus 5%

Pension contributions 15% employer

Life assurance 8x salary

Job summary

Sizewell C Limited is seeking a Cyber Controls Specialist to maintain and enhance the cyber security controls library, ensuring documentation is accurate, evidenced, and aligned with risks and regulatory requirements.

You will work with cyber security, digital and risk teams, ensuring controls remain auditable and fit for purpose. The role supports governance, assurance, and regulatory activities in a critical national infrastructure context.

Qualifications

• Degree in Cyber Security, Information Security, IT, CS or related discipline.
• Minimum 3 years' experience in cyber security, information security, controls governance or risk management.
• Experience contributing to a cyber security controls framework or governance structure.
• Experience with risk management processes and risk register activities.
• Evidence collection and maintenance to demonstrate control effectiveness.
• Experience in governance, assurance or compliance activities.

Responsibilities

• Maintain the cyber security controls library, ensuring records are accurate and up-to-date.
• Manage additions, amendments and retirements of controls through governance processes.
• Regularly review controls documentation for gaps and evidence.
• Develop and maintain the control taxonomy in line with standards.
• Maintain audit trails and documentation across all control records.
• Track mappings between risk register and controls library.
• Identify gaps in control coverage and address discrepancies with stakeholders.
• Assist in risk treatment option evaluation and decision-making.
• Support assessment of control effectiveness and continuous improvement.
• Contribute to governance processes, arrangements and practices.
• Gather evidence and coordinate testing with control owners for monitoring.
• Prepare evidence packs and materials for regulatory inspections and assurance activities.
• Monitor remediation progress and escalate overdue actions.
• Produce reports and dashboards for governance meetings.

Skills

Cyber security controls

ISO 27001

Risk management

Documentation

Stakeholder engagement

Education

Degree in Cyber Security/Information Security or related

Tools

GRC tools

Job description

Sizewell C Limited is seeking a Cyber Controls Specialist to maintain and enhance the cyber security controls library, ensuring documentation is accurate, evidenced, and aligned with risks and regulatory requirements.

You will work with cyber security, digital and risk teams, ensuring controls remain auditable and fit for purpose. The role supports governance, assurance, and regulatory activities in a critical national infrastructure context.