Cyber Requirements & Compliance Manager

Sizewell C Limited; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Annual leave 28 days; 30 after 5 years

10% annual bonus

Defined contribution pension up to 7.5

Employer 15% pension contribution

Life assurance up to 8x salary

Job summary

Sizewell C Limited is seeking a Cyber Requirements & Compliance Manager to lead cyber security strategy, policy, and regulatory compliance. You will act as the primary interface with the ONR, translating complex obligations into actionable business requirements and supervising a specialist team.

Reporting to the CISO, you will drive governance, ensure controls are implemented, and collaborate with senior leaders to maintain a secure, compliant organisation across London, Leiston or Ipswich

Qualifications

• Degree qualified or equivalent in cyber security, information security, risk management or related discipline.
• Minimum of five years' experience in cyber security, information security, compliance or regulatory function.
• At least three years in a role with compliance/policy/assurance or regulatory engagement.
• Proven track record managing regulatory obligations and engaging with regulators.
• Experience conducting/overseeing assessments against ISO 27001, NCSC CAF or equivalent.
• Preparation for regulatory inspections, audits and reviews, including evidence management.
• Development and implementation of cyber security strategies, policies and governance in complex organisations.
• Professional certification such as CISSP/CISM/CRISC (holder or in progress).
• Experience in highly regulated sectors (nuclear, energy, utilities, healthcare, public sector or financial services).
• People management or functional leadership experience in cyber security/governance/compliance.

Responsibilities

• Act as the primary ONR contact on cyber security and information assurance matters.
• Identify and maintain cyber security requirements from legislation, regulation and industry expectations.
• Prepare, coordinate and submit regulatory documentation and responses.
• Support regulatory inspections, reviews and assessments; implement requirements.
• Manage regulatory findings, recommendations and remediation actions to closure.
• Lead development and continual improvement of the Cyber Security Strategy and policy framework.
• Embed cyber requirements across the organisation with stakeholders.
• Provide governance reporting and risk-based oversight of cyber compliance.

Skills

Regulatory engagement

Cyber security strategy

Policy development

Compliance monitoring

Information security governance

Stakeholder management

Security frameworks

Education

Degree in Cyber Security/Information Security/Risk Management

Tools

ISO 27001/27002

NIST CSF 2.0

NCSC CAF

Job description

Sizewell C is entering an exciting phase of growth as we mature into an independent organisation and continue building one of the UK’s largest and most important energy projects. We are now recruiting the below position:

Position: Cyber Requirements & Compliance Manager

Eligibility: UK residency and the right to work in the UK

Security Clearance: Active Security Clearance is required and must already be in place

Location: London, Leiston or Ipswich, with hybrid working and a minimum of 2 days per week on-site. Travel to other Sizewell C locations may be required.

Contract: Permanent, full-time

Benefits include:

• Annual Leave: 28 days per annum, increasing to 30 days after 5 years of service, plus bank holidays


• Bonus: 10% annual bonus


• Pension Contributions: Defined Contribution Pension Scheme with up to 7.5% employee contribution 15% employer contribution


• Life Assurance: Up to 8 x salary

Closing Date: 1st October 2026

About the Role:

The Cyber Requirements & Compliance Manager plays a critical role in ensuring Sizewell C's cyber security arrangements remain aligned with regulatory, legal and organisational requirements.

Reporting directly to the Chief Information Security Officer (CISO), you will lead the development of cyber security strategy, policies and compliance arrangements, translating complex regulatory obligations into practical business requirements. You will also provide leadership and line management to the Cyber Requirements & Compliance Specialist.

Acting as the primary cyber security interface with the Office for Nuclear Regulation (ONR), you will drive regulatory engagement, oversee compliance monitoring and provide assurance that cyber security controls and governance arrangements are effectively implemented across the organisation.

This is a highly visible role that requires close collaboration with senior leaders, regulators and specialist cyber teams, supporting the delivery of a secure, resilient and compliant organisation.

Key Responsibilities:

Regulatory Relationship & Engagement

• Act as the primary point of contact with the ONR on cyber security and information assurance matters.


• Identify, interpret and maintain cyber security requirements arising from legislation, regulation and industry expectations.


• Prepare, coordinate and submit regulatory documentation and responses as required.


• Support regulatory inspections, reviews and assessments, ensuring requirements are clearly understood and implemented.


• Manage regulatory findings, recommendations and improvement actions through to successful closure.

Cyber Security Strategy & Policy

• Lead the development and continual improvement of the Cyber Security Strategy, ensuring alignment with business objectives and regulatory expectations.


• Translate strategic objectives into measurable outcomes and governance reporting.


• Own and govern the organisation’s cyber security policy framework, ensuring policies, standards and procedures remain effective and up to date.


• Work closely with technical and business stakeholders to embed cyber requirements across the organisation.


• Promote a consistent and risk-based approach to cyber governance and compliance.

Compliance Monitoring & Assurance

• Oversee compliance against applicable legislation, regulatory requirements, contractual obligations and recognised cyber security frameworks.


• Establish and maintain effective compliance monitoring arrangements that support continual assurance.


• Work closely with assurance and audit functions to maintain robust evidence and demonstrate compliance.


• Maintain compliance registers, remediation plans and governance records.


• Support external audits, assessments and certification activities.

Governance & Reporting

• Provide expert advice to governance forums on regulatory requirements, compliance performance and emerging risks.


• Prepare reports and executive briefings for the CISO and senior leadership team.


• Highlight material risks, compliance gaps and remediation priorities, providing practical recommendations.


• Support the ongoing development of cyber governance, reporting and assurance arrangements.

Knowledge & Skills:

• Expertise in ISO 27001/27002 and NIST Cyber Security Framework (CSF) 2.0.


• Working knowledge of the NCSC Cyber Assessment Framework (CAF) and information security management systems.


• Ability to develop and maintain policy frameworks that translate complex regulatory expectations into practical organisational controls.


• Comprehensive understanding of compliance management frameworks, including gap analysis, remediation planning, control validation and audit readiness.


• Excellent written communication skills, with the ability to produce strategies, policies, regulatory submissions and executive-level reports.


• Experience managing compliance registers, requirements repositories and evidence within enterprise toolsets.


• Strong stakeholder engagement and influencing skills, with the ability to work effectively across technical, operational and executive functions.


• Understanding of the UK nuclear regulatory framework for cyber security, including ONR Security Assessment Principles (SyAPs), Nuclear Industries Security Regulations and NIS Regulations.


• Knowledge of audit and assurance methodologies, including internal audit and second-line assurance models.

Qualifications & Experience:

• Degree qualified, or equivalent, in Cyber Security, Information Security, Law, Risk Management or a related discipline.


• Minimum of five years' experience within cyber security, information security, compliance or a related regulatory function.


• At least three years in a role where compliance, policy management, assurance or regulatory engagement formed a core responsibility.


• Proven track record managing regulatory obligations and engaging with government regulators or competent authorities.


• Experience conducting or overseeing compliance assessments against recognised frameworks such as ISO 27001, NCSC CAF or equivalent standards.


• Preparation for and support of regulatory inspections, audits and reviews, including evidence management and action tracking.


• Development and implementation of cyber security strategies, policies and governance frameworks within complex organisations.


• Holder of, or working towards, a recognised professional certification such as CISSP, CISM or CRISC.


• Experience within a highly regulated sector such as nuclear, energy, utilities, healthcare, public sector or financial services.


• Previous people management, team leadership or functional leadership experience within a cyber security, governance or compliance environment.

Why Join us?

• Be part of one of the most important low-carbon energy projects in the UK.


• Work in a mission-driven environment that values innovation, integrity, and long-term sustainability.


• Competitive salary, comprehensive benefits, and opportunities for career development.


• Flexible and hybrid working options.

Humility

• Recognise the value brought fromdifferent culturesand experiences


• Be open to other’s points of view and ideas, be willing to debate and to compromise

Positivity

• Positively challengepoor qualityand performance


• Identifysolutions at the lowest possible level


• Encourage tier 1s and others to bringnew ideasforward

Respect

• Value the rules and environment in which we operate


• Give and receive feedback with respect


• Embrace and engage with new people and ideas


• One team, working closely together and helping each other


• Empowered teams always looking forward.


• Shared responsibility for delivery the project outcomes

Clarity

• Communicate clearly and consistently


• Promote collaboration and team alignment


• Drive simplification at all levels