Principal Security Specialist

Ofgem; Cardiff; Hybrid; GBP 57,000 - 70,000; Full time

Benefits offered by this job

Hybrid working

Training & development

Civil Service pension

30 days annual leave

Job summary

Ofgem, the energy regulator for Great Britain, is seeking a Principal Security Specialist (IT/OT) to lead design, assessment, and implementation of innovative security solutions for critical systems. The role sits in the Cyber Guidance & Monitoring team and involves engaging with diverse stakeholders and delivering secure-by-design guidance.

You will apply national guidance (NCSC) and security frameworks to enhance resilience across energy operators, with hybrid working arrangements and strong

Qualifications

• Experience leading security risk management in complex environments.
• Ability to provide security guidance to stakeholders responsible for critical systems.
• Experience applying security frameworks (NCSC CAF, NIST CSF, ISO 27001, CIS Controls, IEC/ISA 62443).
• Strong stakeholder management and ability to communicate risks to technical and non-technical audiences.

Responsibilities

• Lead high-profile security improvement projects and design security solutions.
• Engage with internal and external stakeholders to shape security posture.
• Apply secure-by-design principles and align with NCSC guidance.
• Provide strategic leadership in cyber security within the G&M team.

Skills

Security leadership

Security improvement planning

Stakeholder engagement

Security frameworks application

Technical and non-technical comms

Tools

NCSC CAF

NIST CSF

ISO 27001

CIS Controls

IEC/ISA 62443

Job description

Ofgem is Great Britain’s independent energy regulator - a critical role that puts us at the forefront of cyber security, ensuring public data is safe and secure and that we set the standard for the energy industry. We’re looking for a Principal Security Specialist (IT/OT) to join and lead the design, assessment, and implementation of innovative security solutions and associated guidance aimed at protecting critical systems. This work aligns with our core mission: to deliver a fair, sustainable, and secure energy future.

This a permanent role within our Cyber Guidance & Monitoring (G&M) team, which sits within Ofgem’s Cyber and Emerging Technologies Directorate. The G&M team focus on ensuring resilience is built into systems run by energy operators who control the UK’s energy infrastructure. We do this as part of our role as Joint Competent Authority (“CA”) for the Network and Information Systems Regulations 2018 (“NIS Regulations”). We provide 1-2-1 and sector-wide advice and guidance to operators throughout their security journeys, seeking to build greater collective industry resilience. We are very fortunate to be able to help influence and shape the security and resilience of a whole sector (specifically, the Downstream Gas and Electricity sector).

Job description

As an expert in the field, you’ll lead high-profile security improvement projects, engaging with a wide range of internal and external stakeholders to shape security posture, implementing best practice in line with National Cyber Security Centre (NCSC) guidance. This is a chance to be at the forefront of innovation and meaningful change, championing secure by design principles and influencing digital strategies that benefit millions. This role provides a rare opportunity to combine technical expertise with strategic leadership – and it’s an exciting time to join us!

At Ofgem, we offer more than just a job – we provide a supportive and flexible working environment designed to help you thrive. With hybrid working arrangements, newly refurbished offices in central London, Glasgow, or Cardiff, and a generous rewards package that includes excellent professional learning and development opportunities (including access to potential higher education funding – subject to review), you’ll find everything you need to excel both professionally and personally.

For further details on the role and on our hybrid working arrangement, please read the candidate pack and other documents below.

Person specification

Please ensure you demonstrate clearly, within your supporting statement, how you meet each of the essential criteria. In the event of receiving a large number of applications, an initial sift may take place on just the lead criteria indicated in the essential criteria.

Essential Criteria:

• Demonstrable experience in a leading role managing technical security risk and delivering security improvement plans within complex organisational, operational, or critical infrastructure environments. (LEAD)
• Proven experience providing security advice, guidance, challenge, and assurance to stakeholders responsible for critical systems, business services, or infrastructure.
• Experience applying security frameworks, risk management methodologies, and technical standards (e.g. NCSC CAF, NIST CSF, ISO 27001, CIS Controls, IEC/ISA 62443) to assess and improve organisational resilience.
• Strong stakeholder management and communication skills, including the ability to influence decision-making and communicate complex security risks to both technical and non-technical audiences.

Behaviours

We’ll assess you against these behaviours during the selection process:

• Seeing the Big Picture
• Changing and Improving
• Making Effective Decisions
• Communicating and Influencing

Benefits

Alongside your salary of £63,443, OFGEM contributes £18,379 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).

Ofgem can offer you a comprehensive and competitive benefits package which includes; 30 days annual leave after 2 years; Excellent training and development opportunities; The opportunity to join the generous Civil Service pension which also includes a valuable range of benefits; hybrid working (currently 1 day a week in the office but this is kept under review), flexible working hours and family friendly policies. Plus lots of other benefits including clean and bright offices based centrally, engaged networks and teams and an opportunity to contribute to our ambitious and important targets of establishing a Net Zero energy system by 2050. This exciting blend of professional challenge and personal reward identifies career opportunities at Ofgem as something to get excited about.