Integrated Security Analyst

Westinghouse Electric Company LLC; Preston; On-site; GBP 55,000 - 75,000; Full time

Job summary

Westinghouse Electric Company LLC in the UK seeks an Integrated Security Analyst to help deliver a cohesive security capability across IT, OT and physical protection systems at Springfields Fuels Ltd. You will monitor, assess and mitigate risks to nuclear material and critical systems in a highly regulated environment.

The role reports to the OT Security Manager and emphasizes collaboration with OT engineers, security teams and supplier assessments to strengthen site-wide security controls,

Qualifications

• Experience in cyber security, OT security, physical security, or a related security discipline within a regulated or critical infrastructure environment.
• Working knowledge of security monitoring technologies, networking fundamentals and system security principles.
• Understanding of at least one of the following areas: IT security (ISO 27001), OT/ICS security (IEC 62443) or physical security systems.
• Documentation skills, with the ability to produce clear records for audit, compliance, and regulatory purposes.

Responsibilities

• Monitor and analyse security events across IT, OT and physical security environments.
• Investigate cyber, operational technology and physical security incidents, escalating issues following site procedures.
• Collect forensic evidence and contribute to incident reviews and continuous improvement activities.
• Maintain security asset inventories and support Critical Digital Asset identification and classification.
• Assist with vulnerability management, risk assessments and maintenance of the Security Risk Register.
• Conduct access reviews and support logical and physical access control processes.
• Help implement security policies, standards and procedures.
• Maintain audit evidence and contribute to regulatory inspections and compliance activities.
• Monitor adherence to security frameworks, regulatory requirements and industry standards.
• Collaborate with OT engineers and physical security teams to strengthen site-wide security controls.
• Review network segmentation, remote access arrangements and physical protection systems.
• Identify opportunities to improve the integration of cyber and physical security measures.
• Review and communicate relevant threat intelligence to stakeholders.
• Contribute to security awareness projects across the business.
• Support supplier and contractor security assessments and oversee third-party access assurance.

Skills

Cyber security

OT security

Physical security

Regulated environment

Security monitoring

Job description

Select how often (in days) to receive an alert:

Welcome to the future of nuclear energy, where Westinghouse Electric Company is leading the field with expertise and innovation to shape the power of tomorrow.

At Westinghouse, innovation is in our DNA. We are creative. We think differently. We reimagine the possible across the nuclear industry every day.

As an Integrated Security Analyst you will help deliver a cohesive, site-wide security capability across all IT systems, Operational Technology (OT) environments, and Physical Protection Systems at Springfields Fuels Ltd.

You will monitor, analyse, and assure security controls, identifying, assessing, and mitigating risks to nuclear material, sensitive information, and critical systems in line with:

• Nuclear Industries Security Regulations (NISR) 2003
• ONR Security Assessment Principles (SyAPs)
• NCSC Cyber Assessment Framework (CAF)
• IEC 62443 (OT Security)
• ISO 27001

This is a multi-disciplinary analyst role requiring strong technical capability, and the ability to operate within a highly regulated nuclear environment. You will report to OT Security Manager.

Responsibilities:

Security Monitoring & Incident Response

• Monitor and analyse security events across IT, OT and physical security environments.
• Investigate cyber, operational technology and physical security incidents, escalating issues following site procedures.
• Collect forensic evidence and contribute to incident reviews and continuous improvement activities.

Asset, Risk & Access Management

• Maintain security asset inventories and support Critical Digital Asset (CDA) identification and classification.
• Assist with vulnerability management, risk assessments and maintenance of the Security Risk Register.
• Conduct access reviews and support logical and physical access control processes.

Compliance & Security Assurance

• Help implement security policies, standards and procedures.
• Maintain audit evidence and contribute to regulatory inspections and compliance activities.
• Monitor adherence to security frameworks, regulatory requirements and industry standards.

OT & Physical Security Integration

• Collaborate with OT engineers and physical security teams to strengthen site-wide security controls.
• Review network segmentation, remote access arrangements and physical protection systems.
• Identify opportunities to improve the integration of cyber and physical security measures.
• Review and communicate relevant threat intelligence to stakeholders.
• Contribute to security awareness projects across the business.
• Support supplier and contractor security assessments and oversee third-party access assurance.

Qualifications:

• Experience in cyber security, OT security, physical security, or a related security discipline within a regulated or critical infrastructure environment.
• Working knowledge of security monitoring technologies, networking fundamentals and system security principles.
• Understanding of at least one of the following areas: IT security (ISO 27001), OT/ICS security (IEC 62443) or physical security systems.
• Documentation skills, with the ability to produce clear records for audit, compliance, and regulatory purposes.

Desirable Skills & Certifications

• Experience in the UK nuclear sector or another critical national infrastructure (CNI) environment.
• Familiarity with NISR, ONR Security Assessment Principles (SyAPs) and the NCSC Cyber Assessment Framework (CAF).
• Professional certifications such as Computing Technology Industry Association Security+, CySA+, GICSP or equivalent.
• Experience supporting audits, inspections or regulatory assessments.
• Active or transferable SC/DV clearance.

#LI-Onsite

Why Westinghouse?

We know that to put forth your best effort, you need to be challenged and enjoy what you do in a supportive and respectful environment. We aim to maintain this balance by offering our employees the amenities, benefits and training they need to reach personal and professional goals.

Below is an example of what employees in the UK can expect:

• Attractive compensation
• Great benefits for your convenience and safety:
  • Peer-to-peer recognition program.
  • Life insurance
  • Pension plan
  • Employee Assistance Program: confidential counseling and resources for employees, eligible dependents, and household members
• Learning and development opportunities.
• We encourage our employees to participate in community service events and other team-building activities to strengthen their bonds and inspire each other.

Westinghouse is an Equal Opportunity Employer including Veterans and Individuals with Disabilities.

Employment opportunities may require access to information which is subject to the export control regulations of the United States. Hiring decisions for such positions are required by law to be made in compliance with these regulations. Applicants for employment opportunities in other countries must be able to meet the comparable export control requirements of that country and of the United States.