Security, Culture, Education & Awareness Practitioner

Sellafield Ltd; Warrington; Hybrid; GBP 42,000 - 64,000; Full time

Job summary

Sellafield Ltd is seeking a SCEA Practitioner to support the delivery of cyber security culture, education and awareness across Sellafield. The role will design and deliver engaging content and campaigns aligned to the CAF and the organisation’s cyber strategy, collaborating across Cyber Security, HR, Training and Communications to embed secure behaviours and reduce human-related cyber risk.

This newly created position requires adaptability, creativity and strong collaboration to mature the

Qualifications

• Experience delivering cyber security awareness, education, or behavioural change initiatives.
• Strong communication skills to tailor messaging to technical and non-technical audiences.
• Understanding of cyber security principles and human factors in risk mitigation.
• Familiarity with the NCSC Cyber Assessment Framework (CAF).
• Ability to work collaboratively across functions and manage multiple priorities.
• Degree or equivalent in Cyber Security, Communications, Education, or related field.
• Experience developing training content or awareness materials.

Responsibilities

• Support the implementation of the Cyber Security Culture, Education & Awareness Strategy.
• Design and deliver cyber awareness campaigns, training materials, and communications for varied audiences.
• Assist in the development and maintenance of the SCEA career pathway and competency framework.
• Contribute to the evaluation of education and awareness programmes with metrics.
• Collaborate with stakeholders to embed cyber awareness into learning and development streams.
• Maintain accurate records of training delivery and campaign outcomes.
• Support knowledge management materials and lessons learned.
• Identify training needs and development opportunities for SCEA capability.
• Engage with external providers to benchmark best practices.
• Promote cyber security awareness across the organisation via events and internal comms.
• Contribute to professional qualifications and accreditation pathways for the capability.
• Assist in onboarding and development of new team members within SCEA.

Skills

Cyber security awareness

Strong communication

Human factors in risk

CAF familiarity

Cross-functional collaboration

Training content development

Education

Degree in Cyber Security

MSc or equivalent

Job description

Location: Warrington or West Cumbria, with flexible hybrid working options available

Blend personal growth and professional development with purposeful work

At Sellafield Ltd, we are harnessing our expertise; bringing together world-class skills and innovative technology to solve complex nuclear, infrastructure, and engineering challenges. By joining Sellafield Ltd, you join an amazing team of people, from all walks of life, where you can thrive in a connected, considerate culture of innovation, collaboration, and community; and play a significant part in the UK's sustainable nuclear future.

The challenges we face are amongst the most complex anywhere in the world. We are using advanced technologies to shape, create and advance the world’s nuclear decommissioning knowledge and capability. That’s why our work is driven by people with a passion for problem-solving and innovation.

About the role

The SCEA Practitioner will support the delivery of cyber security culture, education, and awareness initiatives across Sellafield.

The role contributes to embedding secure behaviours and reducing human-related cyber risk by designing and delivering engaging content, campaigns, and training aligned to the Cyber Assessment Framework (CAF) and the organisation’s cyber strategy. The postholder will work collaboratively across Cyber Security, HR, Training, and Communications to help build a strong security culture and support the development of the CS&IA capability.

This is a newly created role within Sellafield’s Cyber Security function, supporting the development of a strategic and coordinated approach to cyber security culture and awareness. The postholder will play a key role in delivering initiatives that influence secure behaviours and reduce human-related cyber risk. Operating in a complex and regulated environment, the role requires adaptability, creativity, and strong collaboration across multiple functions. As the SCEA capability matures, the Practitioner will contribute to shaping its future direction and embedding it into business-as-usual operations.

Key Responsibilities:

• Support the implementation of the Cyber Security Culture, Education & Awareness Strategy.
• Design and deliver cyber awareness campaigns, training materials, and communications tailored to varied audiences.
• Assist in the development and maintenance of the SCEA career pathway and competency framework.
• Contribute to the evaluation of education and awareness programmes, gathering feedback and behavioural metrics.
• Collaborate with internal stakeholders to embed cyber awareness into organisational learning and development programmes.
• Maintain accurate records of training delivery, campaign outcomes, and SQEP role mapping.
• Support the development of knowledge management materials and sharing of lessons learned.
• Provide input into the identification of training needs and development opportunities for the SCEA capability.
• Engage with external providers and forums to benchmark and incorporate best practices.
• Promote cyber security awareness across the organisation through events, briefings, and internal communications.
• Contribute to the development of professional qualifications and accreditation pathways for the capability.
• Assist in the onboarding and development of new team members within the SCEA function.

Your skills and qualifications:

• Experience in delivering cyber security awareness, education, or behavioural change initiatives.
• Strong communication skills, with the ability to tailor messaging to technical and non-technical audiences.
• Understanding of cyber security principles and human factors in risk mitigation.
• Familiarity with regulatory frameworks such as the NCSC Cyber Assessment Framework (CAF).
• Ability to work collaboratively across functions and manage multiple priorities.
• Degree or equivalent experience in Cyber Security, Communications, Education, or a related field.
• Experience in developing training content or awareness materials.

Skills considered Desirable…

• Professional certifications such as SANS Security Awareness, SSCP, or similar.
• Experience working in regulated or high-hazard industries.
• Understanding of Sellafield Ltd’s operations and ICT estate.
• Experience supporting cultural or behavioural change programmes.
• MSc or equivalent qualification in a relevant field.

Why us?

Sellafield Ltd is a unique place to grow your career, offering a remarkable blend of role variety, job security, personal growth, professional development, and truly significant work. This is your opportunity to tackle some of the biggest challenges in the nuclear, infrastructural and engineering worlds and create a clean and safe environment for generations to come. Explore Sellafield Ltd today.