Cyber Security Manager

Great British Energy - Nuclear; Warrington; In loco; GBP 85.000 - 110.000; Tempo pieno

Descrizione del lavoro

Great British Energy - Nuclear in Warrington is seeking an experienced Cyber Security Manager to lead the development and implementation of cyber security strategies for our SMR project, aligning IT security with international user communities and nuclear regulatory requirements.

You will safeguard critical national infrastructure, manage cyber risks, and ensure secure information generation, transmission and storage throughout the lifecycle of the SMR power station, with a strong emphasis on

Competenze

• Experience in cyber security management within critical infrastructure or nuclear environments.
• Knowledge of IT and cloud technologies.
• Familiarity with UK regulatory frameworks and government security classifications.
• Experience with CSMS/ISMS lifecycle management.
• Strong stakeholder engagement and communication skills.
• Experience in nuclear licensing and regulatory engagement.
• Ability to work in high-assurance, safety-critical context.

Mansioni

• Lead the development and implementation of cyber security strategies for the SMR project including an international user community.
• Ensure compliance with relevant nuclear and cyber security standards (ISO 27001, UK NIS, NCSC, NIST SP 800 series, DSIT standards).
• Develop and maintain the Cyber Security and Information Assurance Framework for the SMR project.
• Collaborate with engineering, IT, and regulatory teams to integrate cyber security into system design and delivery.

Conoscenze

Cyber security management

Critical infrastructure

Nuclear environment knowledge

IT and cloud technologies

Regulatory engagement

Stakeholder engagement

Strategic thinking

Formazione

Degree in Cyber Security/Information Assurance/Engineering

Certifications (CISSP/CISM/ISO 27001 Lead Implementer) desirable

Strumenti

CSMS

ISMS

Descrizione del lavoro

Originally named, Great British Nuclear, Great British Energy - Nuclear is an arm's length body of the Department for Energy Security and Net Zero, dedicated to supporting the development and deployment of new nuclear technologies in Great Britain. We play a crucial role in advancing nuclear new build, ensuring the UK's energy security and achieving net-zero carbon emissions. Great British Energy - Nuclear focuses on fostering innovation, facilitating investment, and coordinating efforts across the nuclear industry to build a resilient and sustainable energy future.

Great British Energy - Nuclear's first step was to start the technology selection process for Small Modular Reactors (SMRs) in 2023. SMRs can potentially be quicker to deploy and less expensive to build than traditional nuclear power plants because they are smaller, have factory based modular manufacturing and more flexible deployment options. In June 2025, Great British Energy - Nuclear announced that Rolls-Royce SMR had been selected as the preferred bidder to build the UK's first SMRs, following a technology selection process that began in 2023.

Great British Energy - Nuclear is aiming to deliver fast, based on a supportive and collaborative culture which values equality and diversity and creates an inclusive workplace.

The Project Team Safety, Licensing and Assurance Function is seeking an experienced Cyber Security Manager to lead the development and implementation of cyber security strategies for our SMR project. This role will focus on information in an IT realm, with a strong focus on information exchange across an international user community. The role holder will ensure compliance with nuclear industry standards and regulatory requirements.

You will be responsible for safeguarding critical national infrastructure, managing cyber risks, and ensuring the secure generation, transmission and storage of protected information throughout the lifecycle of the SMR power station.

Please note, a full job description is available and attached to this advert.

Accountabilities & Responsibilities:

• Lead the development and implementation of cyber security strategies for the SMR project including an international user community.
• Ensure compliance with relevant nuclear and cyber security standards, which could include:
• -ISO/IEC 27001 (Cyber Security Management)
• -UK NIS 18 regulations
• -NCSC guidance
• -NIST SP 800 Series
• -Codes and Standards for the Cyber Security of AI (2025) - DSIT
• -NR Security Assessment Principles (SyAPs)
• Develop and maintain the Cyber Security and Information Assurance Framework for the SMR project.
• Collaborate with engineering, IT, and regulatory teams to integrate cyber security into system design and delivery.

Key Stakeholder Management

• Provide specialist advice to the project on all matters concerning cyber security and assurance.
• Manage and oversee the internal relationships with security stakeholders. Leading external cyber security relationships, to include NCSC and ONR.

Policy and Process

• Create and maintain policies and associated processes required to enable risk-informed decision making concerning the protection of information.
• Ownership of forward work plans, that considers the capability and capacity required to meet the demands of the project.

Innovation for Cyber Security:

• Promote & Support innovation for cyber security, to consider modern technologies and/or approaches.
• Support economic efficiency and value for money for the taxpayer through robust oversight of all elements of cyber security and assurance of the project and its supply chain, throughout the nuclear lifecycle.

Reporting & Performance Management:

• Manage, review, and analysis of cyber security events and incidents across all elements of the project, to identify trends, risks, and areas for improvement.
• Develop supplier enablement materials, including training and awareness resources.

Knowledge, Skills and Experience required:

• Experience in cyber security management within critical infrastructure or nuclear environments.
• Good knowledge in Information Technology (IT) and cloud-based technologies.
• Good working knowledge of relevant codes, standards, regulatory frameworks, and the UK Government Security Classification scheme.
• Experience with Cyber Security Management Systems (CSMS) and Information Security Management Systems (ISMS) requirements, implementation, and lifecycle management.
• Strong stakeholder engagement and communication skills.
• Experience in nuclear licensing and regulatory engagement.
• Familiarity with SMR technologies and digital twin environments.
• Ability to work in a high-assurance, safety-critical context.
• Strategic thinker with a proactive approach to emerging threats and technologies.

Qualifications

• Degree in Cyber Security, Information Assurance, Engineering, or a related field, or equivalent professional experience.
• Relevant certifications (e.g. CISSP, CISM, ISO 27001 Lead Implementer) (Desirable)

Please note, this role may require candidates to obtain and maintain the appropriate level of National Security Vetting.

We recognise that candidates may not meet every requirement listed. If your experience is not an exact match but you believe you have the skills, knowledge and potential to succeed in the role, we encourage you to apply.

At GBE-N, we are committed to building an inclusive workplace where everyone can thrive. We value diversity and encourage applications from all backgrounds, including underrepresented groups. If you require any support or adjustments to help you with your application, please contact us at [e-mail] , and we will be happy to provide assistance.