Cyber Security and Information Assurance Lead

Great British Energy - Nuclear; Warrington; On-site; GBP 90,000 - 120,000; Full time

Job summary

Great British Energy - Nuclear is seeking an experienced Cyber Security and Information Assurance Lead to shape the OT security strategy for our SMR programme. You will secure ITS, SCADA, PLCs, and embedded control systems across the nuclear lifecycle, ensuring SbD integration and robust governance.

With nuclear risk oversight, you will collaborate with Design Authority and NSC, lead OT risk assessments, and drive cyber resilience testing and incident planning in line with IEC 62443 and ISO

Qualifications

• Extensive experience in cyber security management for OT environments, ideally within nuclear, utilities, or other regulated sectors.
• Proven track record securing ITS, SCADA, PLCs, and other industrial control systems.
• Strong knowledge of OT-specific standards and regulatory frameworks.
• Experience in secure OT system design, implementation, and lifecycle management.
• Excellent communication and stakeholder management skills.
• Eligible for UK National Security Vetting - Security Check (SC).
• Certifications such as GICSP, CISSP, CISM, IEC 62443, ISO 27001 Lead Implementer.
• Experience in nuclear licensing and regulatory engagement.
• Familiarity with SMR technologies and digital twin environments.
• Strategic mindset with a proactive approach to emerging OT threats.
• Experience managing cyber teams and working in client-side/employer roles.
• Membership in relevant professional bodies (e.g., IET, ISACA, BCS).

Responsibilities

• Lead the cyber security strategy for OT systems, including ITS, SCADA, and embedded control systems.
• Ensure robust integration of cyber security into OT system architecture and lifecycle.
• Develop and maintain the Information Assurance Framework tailored to OT environments.
• Conduct OT-specific risk assessments, threat modelling, and vulnerability analysis.
• Oversee cyber resilience testing and incident response planning for OT systems.
• Ensure alignment with nuclear and OT cyber standards, including IEC 62443, ISO/IEC 27001, NCSC guidance and UK Cyber Essentials and ONR Security Assessment Principles (SyAPs).
• Act as the primary interface for Secure by Design across OT systems.
• Review and approve design proposals and changes for systems critical to safety, security, and safeguards.
• Collaborate with the Design Authority and Nuclear Safety Committee to embed SbD principles.
• Lead engagement with internal engineering, IT, and regulatory teams.
• Facilitate design reviews and cyber assurance meetings focused on OT systems.
• Develop and maintain OT-focused cyber security policies and processes.
• Drive innovation in OT cyber security, leveraging modern technologies and methodologies.

Skills

OT cyber strategy

ICS security

Threat modelling

Vulnerability analysis

SbD leadership

Stakeholder management

Education

Degree in Cyber Security

Job description

Originally named, Great British Nuclear, Great British Energy - Nuclear is an arm's length body of the Department for Energy Security and Net Zero, dedicated to supporting the development and deployment of new nuclear technologies in Great Britain. We play a crucial role in advancing nuclear new build, ensuring the UK's energy security and achieving net-zero carbon emissions. Great British Energy - Nuclear focuses on fostering innovation, facilitating investment, and coordinating efforts across the nuclear industry to build a resilient and sustainable energy future.

We are looking for an experienced Cyber Security and Information Assurance Lead with strong knowledge of Operational Technology (OT) to lead the development and execution of cyber security strategies for our SMR programme. This role is pivotal in securing industrial control systems (ICS), SCADA platforms, and other safety-critical OT environments across the nuclear lifecycle. You'll ensure compliance with relevant nuclear and cyber standards while embedding security into the heart of system design and delivery.

Accountabilities & Responsibilities

OT-Centric Cyber Strategy & Delivery

• Lead the cyber security strategy for OT systems, including ITS, SCADA, and embedded control systems.
• Ensure robust integration of cyber security into OT system architecture and lifecycle.
• Develop and maintain the Information Assurance Framework tailored to OT environments.
• Conduct OT-specific risk assessments, threat modelling, and vulnerability analysis.
• Oversee cyber resilience testing and incident response planning for OT systems.

Compliance & Standards

• Ensure alignment with nuclear and OT cyber standards, including: IEC 62443 (Industrial Automation & Control Systems Security), ISO/IEC 27001 (Information Security Management), NCSC guidance and UK Cyber Essentials and ONR Security Assessment Principles (SyAPs)

Secure by Design Leadership

• Act as the primary interface for Secure by Design (SbD) across OT systems.
• Review and approve design proposals and changes for systems critical to safety, security, and safeguards.
• Collaborate with the Design Authority and Nuclear Safety Committee (NSC) to embed SbD principles.

Stakeholder Engagement & Governance

• Lead engagement with internal engineering, IT, and regulatory teams.
• Facilitate design reviews and cyber assurance meetings focused on OT systems.
• Develop and maintain OT-focused cyber security policies and processes.
• Drive innovation in OT cyber security, leveraging modern technologies and methodologies.

Knowledge, Skills and Experience required

• Extensive experience in cyber security management for OT environments, ideally within nuclear, utilities, or other regulated sectors.
• Proven track record securing ITS, SCADA, PLCs, and other industrial control systems.
• Strong knowledge of OT-specific standards and regulatory frameworks.
• Experience in secure OT system design, implementation, and lifecycle management.
• Excellent communication and stakeholder management skills.
• Degree in Cyber Security, Information Assurance, Engineering, or related field.
• Eligible for UK National Security Vetting - Security Check (SC).
• Certifications such as GICSP, CISSP, CISM, IEC 62443, ISO 27001 Lead Implementer.
• Experience in nuclear licensing and regulatory engagement.
• Familiarity with SMR technologies and digital twin environments.
• Strategic mindset with a proactive approach to emerging OT threats.
• Experience managing cyber teams and working in client-side/employer roles.
• Membership in relevant professional bodies (e.g., IET, ISACA, BCS).

Please note, this role may require candidates to obtain and maintain the appropriate level of National Security Vetting.

At GBE-N, we are committed to building an inclusive workplace where everyone can thrive. We value diversity and encourage applications from all backgrounds, including underrepresented groups. If you require any support or adjustments to help you with your application, please contact us at , and we will be happy to provide assistance.