Principal Security Specialist

Ofgem; Glasgow; Hybrid; GBP 57,000 - 70,000; Full time

Benefits offered by this job

Civil Service Pension

Hybrid working

30 days annual leave

Job summary

Ofgem is seeking a Principal Security Specialist to lead the design, assessment and implementation of innovative security solutions for critical systems. The role sits in the Cyber Guidance & Monitoring team within the Cyber and Emerging Technologies Directorate, working to strengthen resilience across the energy sector.

The position offers hybrid working with offices in central London, Glasgow, or Cardiff.

Qualifications

• Demonstrable experience in a leading role managing technical security risk and delivering security improvement plans within complex organisational, operational, or critical infrastructure environments.
• Proven experience providing security advice, guidance, challenge, and assurance to stakeholders responsible for critical systems, business services, or infrastructure.
• Experience applying security frameworks, risk management methodologies, and technical standards to assess and improve organisational resilience.

Responsibilities

• Lead high-profile security improvement projects and engage with a wide range of stakeholders to shape security posture.
• Implement best practice in line with NCSC guidance and champion secure-by-design principles.
• Influence digital strategies to benefit critical infrastructure and millions of users.

Skills

Security risk management

Stakeholder management

Communications

Security leadership

Framework knowledge

Tools

NCSC CAF

NIST CSF

ISO 27001

CIS Controls

IEC/ISA 62443

Job description

Ofgem is Great Britain's independent energy regulator - a critical role that puts us at the forefront of cyber security, ensuring public data is safe and secure and that we set the standard for the energy industry. We're looking for a Principal Security Specialist (IT/OT) to join and lead the design, assessment, and implementation of innovative security solutions and associated guidance aimed at protecting critical systems. This work aligns with our core mission: to deliver a fair, sustainable, and secure energy future.

This a permanent role within our Cyber Guidance & Monitoring (G&M) team, which sits within Ofgem's Cyber and Emerging Technologies Directorate. The G&M team focus on ensuring resilience is built into systems run by energy operators who control the UK's energy infrastructure. We do this as part of our role as Joint Competent Authority ("CA") for the Network and Information Systems Regulations 2018 ("NIS Regulations"). We provide 1-2-1 and sector-wide advice and guidance to operators throughout their security journeys, seeking to build greater collective industry resilience. We are very fortunate to be able to help influence and shape the security and resilience of a whole sector (specifically, the Downstream Gas and Electricity sector).

As an expert in the field, you'll lead high-profile security improvement projects, engaging with a wide range of internal and external stakeholders to shape security posture, implementing best practice in line with National Cyber Security Centre (NCSC) guidance. This is a chance to be at the forefront of innovation and meaningful change, championing secure by design principles and influencing digital strategies that benefit millions. This role provides a rare opportunity to combine technical expertise with strategic leadership - and it's an exciting time to join us!

At Ofgem, we offer more than just a job - we provide a supportive and flexible working environment designed to help you thrive. With hybrid working arrangements, newly refurbished offices in central London, Glasgow, or Cardiff, and a generous rewards package that includes excellent professional learning and development opportunities (including access to potential higher education funding - subject to review), you'll find everything you need to excel both professionally and personally.

For further details on the role and on our hybrid working arrangement, please read the candidate pack and other documents below.

Person specification

Please ensure you demonstrate clearly, within your supporting statement, how you meet each of the essential criteria. In the event of receiving a large number of applications, an initial sift may take place on just the lead criteria indicated in the essential criteria.

• Demonstrable experience in a leading role managing technical security risk and delivering security improvement plans within complex organisational, operational, or critical infrastructure environments. (LEAD)
• Proven experience providing security advice, guidance, challenge, and assurance to stakeholders responsible for critical systems, business services, or infrastructure.
• Experience applying security frameworks, risk management methodologies, and technical standards (e.g. NCSC CAF, NIST CSF, ISO 27001, CIS Controls, IEC/ISA 62443) to assess and improve organisational resilience.
• Strong stakeholder management and communication skills, including the ability to influence decision-making and communicate complex security risks to both technical and non-technical audiences.

Behaviours

We'll assess you against these behaviours during the selection process:

• Seeing the Big Picture
• Changing and Improving
• Making Effective Decisions
• Communicating and Influencing

Alongside your salary of £63,443, OFGEM contributes £18,379 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).

Ofgem can offer you a comprehensive and competitive benefits package which includes; 30 days annual leave after 2 years; Excellent training and development opportunities; The opportunity to join the generous Civil Service pension which also includes a valuable range of benefits; hybrid working (currently 1 day a week in the office but this is kept under review), flexible working hours and family friendly policies. Plus lots of other benefits including clean and bright offices based centrally, engaged networks and teams and an opportunity to contribute to our ambitious and important targets of establishing a Net Zero energy system by 2050. This exciting blend of professional challenge and personal reward identifies career opportunities at Ofgem as something to get excited about.