Hybrid Cyber Controls Manager

Sizewell C Limited; Greater London; Hybrid; GBP 85,000 - 110,000; Full time

Benefits offered by this job

Annual Leave

Bonus

Pension Contributions

Life Assurance

Job summary

Sizewell C Limited is seeking a Cyber Controls Manager to lead and maintain the organisation's cyber security controls framework. The role requires active security clearance and will be based in London, Leiston or Ipswich with hybrid working and on-site presence.

You will report to the CISO, own the controls library, ensure evidence and governance, and work with risk, assurance and programme teams to improve cyber resilience. Strong leadership and experience with ISO 27001 are essential.

Qualifications

• Degree in Cyber Security, Information Security or related field.
• Minimum 5 years in cyber security with 3+ years in controls, frameworks or assurance.
• Experience presenting to senior stakeholders and governance forums.
• Experience supporting audits, assurance activities or regulatory inspections.

Responsibilities

• Own and maintain the cyber security controls library and taxonomy.
• Ensure controls are documented with ownership, status, risks and evidence.
• Maintain traceability between risks, obligations and controls.
• Collaborate with risk, cyber, assurance and delivery teams to strengthen governance.
• Provide leadership to the Cyber Controls Specialist and ensure effective delivery.

Skills

Cyber security controls

ISO 27001

Governance & risk

Stakeholder engagement

Leadership

Regulatory compliance

Threat awareness

Education

Degree in Cyber Security

Tools

GRC platforms

Job description

Sizewell C Limited is seeking a Cyber Controls Manager to lead and maintain the organisation's cyber security controls framework. The role requires active security clearance and will be based in London, Leiston or Ipswich with hybrid working and on-site presence.

You will report to the CISO, own the controls library, ensure evidence and governance, and work with risk, assurance and programme teams to improve cyber resilience. Strong leadership and experience with ISO 27001 are essential.