Regulatory Cyber Assurance Lead for Critical Infrastructure

Ofgem; Greater London; Hybrid; GBP 57,000 - 70,000; Full time

Benefits offered by this job

Hybrid working

Civil Service Pension

30 days annual leave

Training & development

Job summary

Ofgem is recruiting two Regulatory Cyber Assurance Principals to strengthen cyber resilience across Great Britain's energy sector. You will lead assurance activities, assess compliance with the NIS Regulations and provide expert regulatory guidance to Operators of Essential Services.

The role blends cyber security, regulation and critical infrastructure oversight. You will engage with government partners and industry stakeholders, delivering evidence-based decisions and robust inspection reports

Qualifications

• Professional cyber security qualifications relevant to regulatory environments (e.g., CISSP, CISA, CISM, ISO 27001 Lead Auditor).
• Experience with cyber risk assessments in OT/IT for Critical National Infrastructure environments.
• Ability to advise on regulation and policy to promote good security practice across the sector.
• Proven ability to inspect, audit or test information security controls and produce clear reports.

Responsibilities

• Lead and maintain relationships with Operators of Essential Services (OES).
• Provide expert guidance on compliance with the NIS Regulations for the DGE sector.
• Lead regulatory assurance activities and align with regulatory expectations.
• Contribute to NIS inspections, reviews of evidence, on-site assessments and inspection reports.
• Assess and determine compliance status and document outcomes accurately.
• Escalate concerns and work with Enforcement on regulatory actions when needed.
• Develop cyber assurance policies, methods and regulatory approaches for continuous improvement.
• Collaborate with government, other authorities and industry to support resilience objectives.

Skills

Cyber risk assessments

OT/IT risk

Regulatory policy advice

Inspection & auditing

Written communication

Education

CISSP

CISA

CISM

ISO 27001 Lead Auditor

GICSP

ISA/IEC 62443 Cybersecurity Expert

Job description

Ofgem is recruiting two Regulatory Cyber Assurance Principals to strengthen cyber resilience across Great Britain's energy sector. You will lead assurance activities, assess compliance with the NIS Regulations and provide expert regulatory guidance to Operators of Essential Services.

The role blends cyber security, regulation and critical infrastructure oversight. You will engage with government partners and industry stakeholders, delivering evidence-based decisions and robust inspection reports