Information Security & Assurance Officer (Sizewell C)

HPC Jobs Service; Leiston; On-site; GBP 60,000 - 90,000; Full time

Job summary

Bachy Soletanche/GSA, supporting Sizewell C, is seeking an Information Security & Assurance Officer to ensure delivery of client ISMP controls and governance across projects.

You will own the ISMS, coordinate security assessments, manage supplier security, and align with UK GDPR and NIS2 where applicable, while driving continuous improvement and security culture across the organisation.

This role is based at Sizewell C with access to modern security tooling and cross‑site collaboration.

Qualifications

• Strong knowledge of ISO/IEC 27001, Cyber Essentials Plus and data protection laws.
• Experience delivering security assurance across a UK organisation.
• Ability to produce assurance reports and executive dashboards.

Responsibilities

• Implement ISMP requirements across GSA and maintain governance docs.
• Own and operate the ISMS with policies and procedures.
• Manage security assessments, remediation actions and supplier reviews.
• Oversee O365 and core IT controls, IAM/MFA, logging and config baselines.
• Lead security incident response, root-cause analysis and post‑incident reviews.
• Deliver security awareness and engage with auditors, MSSPs and SOC partners.

Skills

Information security

ISMS management

Security governance

Stakeholder engagement

Security reporting

Incident response

Threat awareness

Education

Degree in computer science or related discipline

Tools

Microsoft Defender

SIEM (Sentinel)

EDR/XDR

Vulnerability management

Job description

The Sizewell C Jobs Service supports local people into exciting, long-term careers across our Project.#SZCJobs

Information Security & Assurance Officer (Sizewell C)

Bachy Soletanche/GSA

Sizewell C

The Role

The Information Security & Assurance Officer is responsible for ensuring that GSA implements and maintains all mandatory information and cyber-security controls required under the client Information Security Management Plan (ISMP), associated security documentation and governance agreements with parent companies.

The role provides assurance across corporate and project systems, oversees integration with client security operations, ensures subcontractor compliance, and leads the development and operation of a robust Information Security Management System (ISMS) aligned to ISO/IEC 27001. You will act as the central authority for information security governance, incident management and continuous improvement across the organisation.

What You'll Be Doing

• Governance & Compliance: Implement and enforce client ISMP requirements across GSA, including security assurance levels, export control, information classification and data-handling rules. Maintain governance documentation, audit evidence and subcontractor security flow-downs, and support client, partner and third-party security reviews.
• Security Assurance & ISMS Ownership: Own and operate the ISMS, including policies, standards and procedures. Complete and manage required security and privacy assessments (e.g. TPSA, SRA, DPIA, ECIA), track remediation actions, review suppliers, and ensure alignment with UK GDPR, DPA 2018, NIS2 (where applicable) and sector-specific standards.
• O365 & Technical Security Oversight: Provide assurance over O365 and core IT controls, including identity and access management, MFA, endpoint protection, logging, monitoring and baseline security configuration across office and operational locations.
• SOC Integration & Incident Management: Oversee security monitoring, log availability, alerting and incident response processes, ensuring effective integration with the client SOC and any managed security service providers. Lead or support incident response, root‑cause analysis and post‑incident reviews.
• Stakeholder Engagement & Awareness: Act as a trusted adviser to IT, project teams and business units, translating technical risk into clear business impact. Deliver security awareness initiatives, phishing simulations and ongoing engagement with suppliers, auditors, MSSPs and SOC partners.
• Continuous Improvement: Identify opportunities to optimise and automate security controls, contribute to the cyber‑security roadmap and maintain awareness of emerging threats, technologies and industry best practice.

You will promote company and client values and support a positive safety and security culture across all activities.

What We're Looking For

Essential

• Demonstrable experience in information security assurance and technical cyber‑security operations within a UK organisation
• Strong working knowledge of ISO/IEC 27001, Cyber Essentials Plus, NIST CSF and UK GDPR / DPA 2018
• Hands‑on experience with modern security tooling, including Microsoft Defender, SIEM (e.g. Sentinel), EDR/XDR and vulnerability management tools
• Experience leading or supporting security incident response, root‑cause analysis and post‑incident reviews, including working with SOC teams (internal or MSSP)
• Ability to produce clear assurance reports, security documentation and executive‑level dashboards
• Strong stakeholder management skills, with the ability to translate technical risk into pragmatic business actions

Desirable

• Degree (or equivalent experience) in computer science, cyber security or a related discipline
• Familiarity with SANS Top 20 Critical Security Controls and UK Cyber Essentials requirements
• Experience operating in complex, regulated or safety‑critical environments

For this role you must have evidence of right to work in the UK. As a project, we do not discriminate on the grounds of age, gender, race, colour, religion, disability or sexual orientation, and we welcome applications from all sections of the community.

Why Join Us?

For more than 60 years, nuclear power stations in the UK have been quietly keeping Britain fuelled with massive amounts of home‑grown energy.

Our teams up and down the country are proudly continuing to serve the nation - but they also have an eye on the future.

EDF is leading the UK's nuclear renaissance with the construction of a new nuclear power station at Hinkley Point C and plans for a new power station at Sizewell C in Suffolk.

Nuclear power is the most reliable, low‑carbon energy source currently available to the UK. EDF is playing a key role in the development of nuclear sites, while Hinkley Point C will provide low‑carbon electricity to meet 7% of the UK demand. The project is already making a positive impact on the local and national economy as well as boosting skills and education.

We're not just building new nuclear power stations. We're developing careers, upskilling generations and creating thousands of employment and apprenticeship opportunities across a variety of skills areas.

It takes a special kind of person to work in the nuclear energy industry and although we have thousands of them there's always a need for more.

Our industry has a mind‑boggling range of opportunities and more jobs, and in more places, than you might think. But it's also an industry which is changing.

We're a responsible business and proud to be Britain's biggest generator of zero carbon electricity. With size, age and experience, we believe we can do even more.