Cyber Strategy Manager

Sellafield Ltd.; England; On-site; GBP 110,000 - 150,000; Full time

Benefits offered by this job

Annual bonus up to 15%

Defined contribution pension match 13

30 days annual leave + bank holidays

Cycle to Work Scheme

Health app & annual health check

Learning & development opportunities

Rewards & Benefits

Job summary

Sellafield Ltd. is seeking a Cyber Strategy Manager to lead the development and execution of the organisation’s cyber security strategy.

You will align with national priorities, regulatory requirements, and resilience goals across IT and OT in a high-consequence nuclear setting. You will drive strategic initiatives to enhance cyber maturity, oversee investments and programmes, and engage with senior leadership to ensure strategy is embedded in planning.

Qualifications

• Proven experience in cyber strategy, governance or risk management in regulated environments.
• Strong understanding of cyber security frameworks (NIST CSF, ISO 27001, CAF).
• Experience leading cross-functional cyber initiatives or programmes.
• Excellent communication and stakeholder engagement with senior leadership.
• Familiarity with UK cyber regulations and guidance (NIS, ONR, NCSC).
• Ability to translate complex regulatory requirements into strategic direction.
• Eligible for SC or DV security clearance.

Responsibilities

• Develop and maintain a long-term cyber strategy aligned with organisational objectives and frameworks.
• Lead strategic planning for cyber risk management, resilience, and capability development.
• Oversee cyber maturity assessments and drive continuous improvement initiatives.
• Coordinate cross-functional cyber programmes, including governance and awareness.
• Engage with senior leadership to embed cyber strategy in business planning.

Skills

Cyber strategy

Governance

Risk management

Cross-functional leadership

Stakeholder engagement

UK cyber regulations

Security clearance

Tools

NIST CSF

ISO 27001

CAF

Job description

At Sellafield Ltd, we are harnessing our expertise; bringing together world-class skills and innovative technology to solve complex nuclear, infrastructure, and engineering challenges. By joining Sellafield Ltd, you join an amazing team of people, from all walks of life, where you can thrive in a connected, considerate culture of innovation, collaboration, and community; and play a significant part in
the UK’s sustainable nuclear future.

About the role

As a Cyber Strategy Manager you will lead the development and execution of the organisation’s cyber security strategy, ensuring alignment with national security priorities, regulatory requirements, and operational resilience goals. The Cyber Strategy Manager will drive strategic initiatives that enhance cyber maturity across IT and OT environments, enabling secure digital transformation in a high-consequence nuclear setting.

Key responsibilities

• Develop and maintain a long-term cyber strategy aligned with organisational objectives and national frameworks (e.g., NCSC, ONR, BEIS).
• Lead strategic planning for cyber risk management, resilience, and capability development.
• Oversee cyber maturity assessments and drive continuous improvement initiatives.
• Coordinate cross-functional cyber programmes, including governance, awareness, and innovation.
• Engage with senior leadership to ensure cyber strategy is embedded in business planning and decision-making.
• Represent the organisation in external strategic forums, including government and industry working groups.
• Monitor emerging threats, technologies, and regulatory changes to inform strategic direction.
• Provide strategic oversight of cyber investment planning, including budget prioritisation and resource allocation.

Authorities & Dimensions

• Strategic Leadership: Authority to define and implement the cyber strategy across the organisation.
• Policy Direction: Influence over cyber policy development and alignment with strategic goals.
• Budgetary Input: Authority to recommend and prioritise cyber-related investments and resource allocations.
• Stakeholder Engagement: Acts as the strategic liaison with external bodies (e.g., ONR, NCSC, NDA, DESNZ).
• Programme Oversight: Leads or sponsors major cyber programmes and initiatives.
• Scope: Organisation-wide, covering both corporate IT and Operational Technology (OT) environments.
• Strategic Impact: Direct influence on cyber posture, regulatory compliance, and digital transformation.
• Team Leadership: May manage a small team of cyber strategists, analysts, or programme leads.
• Budget Influence: Contributes to multi-million-pound cyber investment planning and prioritisation.
• Stakeholder Reach: Interfaces with executive leadership, regulators, government departments, and industry partners.

Your Skills and Qualifications

Essential

• Proven experience in cyber strategy, governance, or risk management within a regulated or high-consequence environment.
• Strong understanding of cyber security frameworks (e.g., NIST CSF, ISO 27001, CAF).
• Demonstrable experience in leading cross-functional cyber initiatives or programmes.
• Excellent communication and stakeholder engagement skills, including experience working with senior leadership.
• Familiarity with UK cyber regulations and guidance (e.g., NIS Regulations, ONR Cyber Security Guidance, NCSC principles).
• Ability to translate complex technical and regulatory requirements into strategic direction.
• Eligible for SC or DV security clearance.

Desirable

• Experience in the nuclear sector or other Critical National Infrastructure (CNI) domains.
• Knowledge of Operational Technology (OT) and Industrial Control Systems (ICS) cyber risks.
• Experience engaging with UK regulators (e.g., ONR, NCSC, DESNZ).
• Relevant certifications such as CISSP, CISM, SABSA, or ISO 27001 Lead Implementer.
• Experience in cyber investment planning or business case development.
• Familiarity with enterprise architecture or digital transformation programmes.

Why us?

At Sellafield Ltd, we are committed to supporting our employees in fulfilling their potential. With having 100 years of work in front of us, we offer comprehensive training and development opportunities, enabling you to feel inspired in your role. Whatever area you join us in, you’ll find a genuinely exciting and rewarding career.

Employee benefits

• You will benefit from an annual bonus of up to 15%, made up of company and personal performance
• An attractive defined contribution pension scheme – the company will match up to 13.5% for a 7% employee contribution!
• 30 days annual leave + bank holidays. Plus, the ability to purchase an extra 2.5 days per year.
• The ability to carry over 10 days annual leave each financial year
• Paid Sick Leave
• Family Friendly Policies – Visit our Rewards & Benefits page to read more
• Cycle to Work Scheme
• Lifestyle Benefits sasra.co.uk
• Learning & Development Opportunities https://careers.sellafieldsite.co.uk/work-with-us/learning-and-development/
• Reward & Recognition Policies
• Welfare & Employee Assistance Programme
• Free Aviva Health App & Annual Health Check
• MyDiscounts – Employee Savings & Discounts
• MyBenefits – A Charity Giving Scheme
• Many, many more! Click this link to visit our Rewards & Benefits page: https://careers.sellafieldsite.co.uk/work-with-us/rewards-and-benefits/

Sellafield Ltd is a unique place to grow your career, offering a remarkable blend of role variety, job security, personal growth, professional development, and truly significant work. This is your opportunity to tackle some of the biggest challenges in the nuclear, infrastructural and engineering worlds and create a clean and safe environment for generations to come. Explore Sellafield Ltd today.

Additional Information

• The closing date for this vacancy is 16th November 2026
• In the event of a high number of responses to any advert, Sellafield Ltd reserves the right to close the advert early. Once closed, the advert will be removed from our website.
• Please regularly check your Spam/Junk folders for news about this vacancy, correspondence could contain invitations to interview and other important updates.
• Qualifications
• Right to Work in the UK: As part of our screening process, all candidates must demonstrate their right to work in the UK. If you are not a UK national, you will be required to provide evidence of your immigration status. This is generated through the UK Government online service via the GOV.UK services below: A valid eVisa (digital immigration status) share code https://www.gov.uk/evisa/view-evisa-get-share-code-prove-immigration-status A Right to Work share code https://www.gov.uk/prove-right-to-work
• Applicants who are not UK nationals must provide a valid Right to Work share code and evidence of their eVisa status at the point of application. Applications submitted without this information are not able to be progressed.
• Please be aware that this role is subject to achieving security clearance. This role requires higher level of National Security Vetting where applicants must typically have 5 or 10 years of continuous residency in the UK. Factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the level of clearance you’re able to achieve.
• Sellafield Ltd are recognised as a Disability Confident Employer (Level 3). Disability Confident employers offer an interview to disabled applicants that meet the minimum criteria for a vacancy. Sellafield Ltd define the minimum criteria as the ‘essential skills’ which are listed on the vacancy notice. Whilst completing your application form, you will be able to indicate if you wish to be considered under the disability confident scheme. If you would prefer to discuss this directly with us, please contact the GBS Recruitment team on [e-mail]