Cyber Risk Manager — Strategy & Resilience Lead

Sizewell C Limited; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Annual leave

Bonus 10%

Pension contributions

Life assurance

Job summary

Sizewell C Limited is seeking a Cyber Risk Manager to lead the organisation's cyber risk management framework. You will translate threats into actionable insights, working with cyber security, digital, assurance and business teams to strengthen resilience and align with regulatory and business objectives.

Reporting to the CISO, you will own the risk register, taxonomy and scoring, ensuring escalation and governance, with a focus on protecting critical infrastructure in a highly regulated

Qualifications

• Degree qualified in Cyber Security, Information Security, Computer Science, Risk Management or related discipline.
• Minimum of five years in cyber security or information security, including at least three years with significant responsibility for cyber risk management.
• Proven track record of conducting or overseeing cyber risk assessments using ISO 27005, NIST RMF, FAIR or OCTAVE.
• Experience developing, maintaining and governing cyber risk registers within complex organisations.
• Relevant professional certifications such as CISSP, CISM, CRISC or equivalent.

Responsibilities

• Own and maintain the organisation's cyber risk register, ensuring risks are clearly documented and audit ready.
• Develop and maintain the cyber risk taxonomy, including risk categories, threat sources and impact domains aligned to critical business functions.
• Define and maintain risk scoring methodologies, appetite thresholds and escalation criteria.
• Ensure cyber risks are assessed, prioritised and managed consistently across the organisation.
• Provide guidance and support for complex cyber risk assessments as required.
• Lead the Cyber Risk Assessment Lead and oversee risk treatment plans with clear ownership and timelines.

Skills

Cyber risk frameworks

ISO 27005

NIST RMF

Risk management

Stakeholder management

Communication skills

Regulatory awareness

Education

Degree in Cyber Security / Information Security / CS / Risk Management

Job description

Sizewell C Limited is seeking a Cyber Risk Manager to lead the organisation's cyber risk management framework. You will translate threats into actionable insights, working with cyber security, digital, assurance and business teams to strengthen resilience and align with regulatory and business objectives.

Reporting to the CISO, you will own the risk register, taxonomy and scoring, ensuring escalation and governance, with a focus on protecting critical infrastructure in a highly regulated