Cyber Incident Response Lead

Sizewell C Limited; Greater London; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

5% annual bonus

28 days leave + bank holidays

Pension up to 15% employer

Job summary

Sizewell C Limited is seeking an experienced Cyber Incident Response Lead to develop, manage, and coordinate the organisation’s cyber incident response capability within a highly regulated and safety-critical environment. You will lead preparation, detection, response, recovery, and lessons learned activities for cyber security incidents, working with cross-functional teams and external partners.

Based in London on a hybrid basis with travel to Suffolk as required, this permanent full-time role

Qualifications

• Proven experience leading cyber incident response or security operations functions within large, complex organisations.
• Experience managing major cyber incidents and coordinating cross-functional response teams.
• Knowledge of cyber security frameworks such as NIST, ISO27001, or CIS.
• Strong stakeholder management, communication, and decision-making skills.
• Ability to operate effectively within high-pressure and time-critical situations.

Responsibilities

• Develop, manage, and coordinate the organisation’s cyber incident response capability within a regulated and safety-critical environment.
• Lead the preparation, detection, response, recovery, and lessons learned activities for cyber security incidents.
• Work closely with Security Operations, Infrastructure, Digital, OT, Legal, Risk, and external partners.

Skills

Cyber incident response leadership

Security operations

Stakeholder management

Decision-making under pressure

Communication skills

Tools

SIEM platforms

Job description

London, GB, EC2R 7BP Manchester, GB, M1 4HN Bristol, GB, BS32 4TP Leiston, GB, IP16 4EW Felixstowe, GB, IP10 0DD

Career Area: Data, Tech & IT

Cyber Incident Response Lead

Sizewell C’s business is to design, finance, construct, commission, operate, maintain, and eventually decommission the nuclear power plant and related infrastructure at Sizewell C in Suffolk. Overall, whilst the Company is in the construction phase, the Boards’ principal focus is on the development and construction of Sizewell C on time, on budget and to the highest quality and safety standards. The Company is maturing to meet all these requirements.

Sizewell C is economically regulated by OFGEM under the Regulated Asset Base (RAB) model similar to other UK electricity distribution networks and Thames Tideway.

Sizewell C construction strategy is to replicate the design of Hinkley Point C, using the majority of the same supply chain, but innovating in the way it is delivered to achieve savings in time and cost of around 20%. The CCO will need to be guided by and incorporate lessons learned from the Hinkley Point C commercial delivery to achieve Sizewell C’s ambition.

Following Financial Completion and Revenue Commencement, Sizewell C is fully funded and is owned by; The Secretary of State for Energy Security and Net Zero representing HM Government, La Caisse, Centrica, EDF and Amber Infrastructure.

Sizewell C is entering an exciting phase of growth as we mature into an independent organisation and continue building one of the UK’s largest and most important energy projects. We are now recruiting the below position.

Cyber Incident Response Lead

Location:Based in London on a hybrid basis with travel to Suffolk as required.

Contract: Permanent, full-time.

Benefits include:

• Bonus:5% annual bonus.
• Annual Leave: 28 days per annum, increasing to 30 days after 5 years of service, plus bank holidays.
• Pension Contributions: up to 7.5% employee contribution 15% employer contribution.

ClosingDate: Monday 21st September 2026

Impact

We are seeking an experienced Cyber Incident Response Lead to develop, manage, and coordinate the organisation’s cyber incident response capability within a highly regulated and safety-critical environment.

You will lead the preparation, detection, response, recovery, and lessons learned activities associated with cyber security incidents, working closely with Security Operations, Infrastructure, Digital, Operational Technology, Legal, Risk, and external partners.

About You

• Proven experience leading cyber incident response or security operations functions within large, complex organisations
• Experience managing major cyber incidents and coordinating cross-functional response teams
• Knowledge of cyber security frameworks such as NIST, ISO27001, or CIS
• Strong stakeholder management, communication, and decision-making skills
• Ability to operate effectively within high-pressure and time-critical situations.

Strong understanding of:

• Security Operations Centre (SOC) processes and technologies
• Incident response frameworks and methodologies
• Threat detection and threat intelligence
• Endpoint, network, and cloud security monitoring tools
• Digital forensics and malware analysis principles
• SIEM and security analytics platforms

Why Join Us?

• Be part of one of the most important low-carbon energy projects in the UK.
• Work in a mission-driven environment that values innovation, integrity, and long-term sustainability.
• Competitive salary, comprehensive benefits, and opportunities for career development.
• Flexible and hybrid working options.

Behavioural Competences

Humility

• Recognise the value brought fromdifferent culturesand experiences
• Be open to other’s points of view and ideas, be willing to debate and to compromise

Positivity

• Positively challengepoor qualityand performance
• Identifysolutions at the lowest possible level
• Encourage tier 1s and others to bringnew ideasforward

Respect

• Value the rules and environment in which we operate
• Give and receive feedback with respect
• Embrace and engage with new people and ideas
• One team, working closely together and helping each other
• Empowered teams always looking forward.
• Shared responsibility for delivery the project outcomes

Clarity

• Communicate clearly and consistently
• Promote collaboration and team alignment
• Drive simplification at all levels

When joining Sizewell C, you may wonder why you are contacted by colleagues with an EDF email or see the EDF logo on portals that you access and/or documentation you receive; this is because we have partnered with EDF for the provision of a number of support services whilst we complete a successful transition out of the EDF group.

At Sizewell C we encourage and embrace diversity and how it can improve our experience and performance at work.It is a requirement that those who join us have the right to work in the UK. Whilst sponsorship may be a possibility that we can explore, we are fully committed to local recruitment where possible, and those already holding the right to work in the UK.

To be appointed to this role, you will need to meet the criteria for Security Vetting, which will, ordinarily, require you to have been a resident of the UK for at least three of the past five years.