Head of Cyber Security

UK Atomic Energy Authority; Clifton Hampden; On-site; GBP 73,000 - 89,000; Full time

Benefits offered by this job

Salary

Bonus 7%

Pension 21.5%

Annual leave 25d

Site closure 3d

Flexible working

Job summary

UK Atomic Energy Authority seeks a senior cyber security leader to set strategic direction for the organisation's security across enterprise IT, science computing, and operational technology. You will act as the principal adviser on cyber strategy, governance and risk, and lead a multidisciplinary team to deliver Secure by Design across programmes.

You will engage with government, regulators and industry partners, influence major technology decisions, and drive security maturity while ensuring a

Qualifications

• Degree or equivalent professional experience in cyber security, information technology, engineering or related discipline.
• Significant experience leading enterprise cyber security or governance functions with credibility across complex environments.
• Experience developing cyber security strategies and roadmaps and advising senior leaders on risk and investment.
• Chartered professional status.
• CISSP, CISM, CRISC, SABSA or CCSP or equivalent.
• Experience representing organisations in national/international forums or with regulators.

Responsibilities

• Develop and deliver UKAEA's cyber security strategy, priorities and multi-year roadmap.
• Lead the cyber security function, governance framework, policies and operating principles.
• Oversee enterprise cyber risk and advise ARAC and Executive Committees on risk and investment.

Skills

Strategic leadership

Executive advisory

Governance & risk

Budget management

Regulated environments

Security standards

Professional certifications

Education

Degree or equivalent

Tools

ISO 27001

Secure by Design

GovAssure

Job description

• Salary: £81,090 (inclusive of Specialist Allowance) + excellent benefits including outstanding pension
• Division: Computing
• Department: Enterprise Infrastructure Solutions

Job Description

About us

Fusion, the process that powers the sun and stars, is one of the most promising options for generating the cleaner, carbon-free energy that our worldbadly needs. UKAEA leads the way in realizing fusion energy, partnering with industryand research organisations to achieveground-breaking advancements. Our goal is to bring fusion electricity to the gridby developing the power stations of tomorrow and the skilled workforce to deliver them.

About the job

Shape the cyber security strategy and resilience of one of the UK’s most ambitious national laboratories.

UKAEA is seeking a senior cyber security leader to set the strategic direction for our organisation-wide approach to cyber security, resilience and risk.

As Head of Cyber Security, you will act as UKAEA’s principal cyber security adviser and technical authority, setting cyber strategy and providing independent, authoritative advice to executive leadership and governance bodies across a complex environment spanning enterprise IT, scientific computing, research and operational technology.

You will lead a multidisciplinary cyber security function, own the cyber governance framework and maintain oversight of UKAEA’s enterprise cyber risk posture, security assurance, resilience and cyber operations. You will influence major technology and investment decisions, embed Secure by Design across organisational change, and represent UKAEA with government, regulators, the NCSC, research institutions and industry partners.

This is a senior leadership opportunity for an experienced cyber professional who can operate credibly at executive level across strategy, enterprise risk, governance and assurance, while retaining the technical depth needed to lead cyber security across a highly complex scientific and technology organisation.

If you have experience operating in complex or regulated environments and engaging with senior leaders, government, regulators or national cyber security organisations, we would like to hear from you.

What You’ll Be Doing

Cyber Security Strategy, Governance & Risk

• Develop and deliver UKAEA’s cyber security strategy, priorities and multi-year roadmap, aligned with organisational objectives, Computing strategy and business needs.
• Lead the cyber security function and own the governance framework, policies, standards and operating principles.
• Oversee enterprise cyber risk, advising senior leaders, ARAC and Executive Committees on risk appetite, risk treatment, investment priorities and strategic decisions.

Security Assurance, Compliance & Resilience

• Lead cyber assurance, regulatory compliance and security improvement, ensuring implementation of GovAssure, CAF, ISO 27001, Cyber Essentials Plus and Secure by Design.
• Oversee audits, cyber resilience, disaster recovery and incident recovery, applying lessons learned and ensuring proportionate security across IT, scientific computing, operational technology and research environments.

Security Operations, Incident & Technology Leadership

• Oversee cyber monitoring, detection, response and recovery, providing strategic leadership during major incidents and organisational crises.
• Embed cyber security and Secure by Design across major technology, infrastructure, scientific and operational programmes, influencing technology decisions, investment and transformation.
• Lead cyber security budgeting, forecasting, investment prioritisation and resource allocation, ensuring effective use of internal resources, suppliers and contracts.
• Act as Head of Profession for Cyber Security, setting professional standards, capability frameworks, career pathways and workforce strategies.
• Lead and develop a multidisciplinary team, supporting recruitment, succession planning, skills development and continuous improvement while promoting UKAEA values and an inclusive culture.

External Engagement & Organisational Representation

• Represent UKAEA with government, regulators, the NCSC, research institutions, industry partners and relevant national and international forums, building strategic relationships and influencing cyber security policy and practice.

What You’ll Bring

• Degree qualified or equivalent professional experience in Cyber Security, Information Technology, Engineering, Computer Science or a related discipline.
• Significant experience leading an enterprise cyber security, information security, technology risk or cyber governance function, with the technical credibility to provide authoritative leadership across a complex technology environment.
• Experience developing and delivering cyber security strategies and organisational roadmaps, leading multidisciplinary teams and driving organisational change.
• Experience advising executive leaders, Boards and Audit Committees on cyber risk, risk appetite, investment and strategic decisions, together with experience managing significant budgets, suppliers, contracts and external partnerships.
• Demonstrable experience delivering organisational security maturity improvement across complex environments.
• Significant experience operating within regulated, government, scientific research, defence, critical national infrastructure or similarly complex organisations.
• Chartered professional status.
• CISSP, CISM, CRISC, SABSA, CCSP or equivalent advanced cyber security qualification.
• Experience representing organisations within national or international technical, cyber security or professional forums.

Please be aware that this role issubject to achievinga UK Security Vetting (UKSV)including The Disclosure & Barring Service (DBS) checks for criminal convictions and possibly a search of open source data.For this roletheUKSV level isSecurityClearance(SC). You must either hold SC clearance with no restrictionsorbe able to achieve it. Note: the UK residency criteria for SC is a minimum of2 out of the last 5 years, at least one year of which must be 12 consecutive months.For further informationplease refer to The UKAEA recruitment process | UKAEA Careers .

As the business matures, the role may need the postholder to acquire Developed vetting (DV) at a later stage.

UKAEA is an onsite organisation, and this role requires regular onsite presence (usually between 3-5 days in any given week) in line with business needs. We actively support flexible working arrangements where this is compatible with the role.

We have a generous range of benefits (see the full list here ) and highlights include:

• A salary of£81,090(inclusive ofa£7,900 specialist allowance)
• Up to 7% corporate performance bonus
• Final salary defined benefits pension scheme with an equivalent of21.5% employer pension contribution
• 25 days annual leave plus2.5 'privilege' days;8 Bank Holidays
• Additional 3 days of site closure over Christmas break
• Flexible working options plus family-friendly leave provisions

Our commitment to ED&I

UKAEA's mission is clean energy for all, and we welcome talented people from all backgrounds to help us achieve this goal. We are committed to equality, diversity,inclusionand accessibility, and strive to ensure fair representation across our workforce.

Please email [e-mail] if you have any questions or require adjustments to help youparticipatefairly in our recruitment process, for example changes to the way we interview or share information. As a Disability Confident Employer, we are committed to providing an inclusive and accessible recruitment experience for all candidates.

We particularly encourage applications from groups currently underrepresented in STEM, including women and people from diverse ethnic backgrounds. All appointments are made onmeritand further information can be found here .