Security, Culture, Education & Awareness Team Lead

Sellafield Ltd; Warrington; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

Sellafield Ltd seeks a proactive SCEA Team Lead to drive a strategic approach to cyber security culture, education, and awareness. You will embed secure behaviours, reduce human-related cyber risk, and align with CAF, collaborating across Cyber Security, HR, Training, and Communications to deliver enterprise-wide outcomes.

The role is newly established, demanding leadership across complex regulated environments, with opportunities to shape career pathways and training programmes for a skilled

Qualifications

• Proven experience leading cyber security awareness or behavioural change programmes.
• Strong understanding of cyber security principles, especially human factors and risk mitigation.
• Excellent communication and stakeholder engagement skills; able to influence at all levels.
• Experience designing and delivering training/awareness content across formats.
• Familiarity with CAF and other regulatory frameworks.
• Track record working in complex organisations with diverse stakeholders.
• Degree or equivalent in a relevant field; capability development and workforce planning experience.

Responsibilities

• Own and deliver the Cyber Security Culture, Education & Awareness Strategy aligned to CAF objectives.
• Lead the development of a Cyber Security Capability Plan focused on behavioural change and education.
• Define a career pathway and competency framework for SCEA capabilities.
• Oversee creation of the SCEA capability, including talent pipeline strategy.
• Collaborate with HR, Training, Communications and Unions to embed cyber awareness in learning programmes.
• Manage capability analysis, resource provisioning and deployment across enterprise priorities.
• Lead education and awareness campaigns and training packages; evaluate impact and effectiveness.
• Engage with external providers to support pipeline and delivery.

Skills

Leadership

Cyber security awareness

Stakeholder engagement

Training delivery

Regulatory alignment

Behavioural change

Communication

NCSC CAF familiarity

Education

Degree in Cyber Security/Communications/Education

Equivalent experience

Job description

Security Culture, Education & Awareness (SCEA) Team Lead

Location: Warrington or West Cumbria, with flexible hybrid working options available

At Sellafield Ltd, we are harnessing our expertise; bringing together world-class skills and innovative technology to solve complex nuclear, infrastructure, and engineering challenges. By joining Sellafield Ltd, you join an amazing team of people, from all walks of life, where you can thrive in a connected, considerate culture of innovation, collaboration, and community; and play a significant part in the UK's sustainable nuclear future.

The challenges we face are amongst the most complex anywhere in the world. We are using advanced technologies to shape, create and advance the world’s nuclear decommissioning knowledge and capability. That’s why our work is driven by people with a passion for problem-solving and innovation.

About the role

The Security Culture, Education & Awareness (SCEA) Team Lead will drive the development and implementation of a strategic approach to cyber security culture, education, and awareness across Sellafield Ltd.

The role will be responsible for embedding secure behaviours, reducing human-related cyber risk, and ensuring alignment with regulatory frameworks such as the Cyber Assessment Framework (CAF). This includes owning the strategic direction for cultural transformation, leading capability development, and working collaboratively across Cyber Security, HR, Training, and Communications to deliver enterprise-wide outcomes.

This is a newly established role within Sellafield’s Cyber Security function, created to address the increasing need for a strategic and coordinated approach to cyber security culture and awareness. The role will be instrumental in shaping how the organisation embeds secure behaviours and reduces human-related cyber risk. Operating in a complex and regulated environment, the role requires strong collaboration across multiple functions and the ability to influence cultural change at scale. The capability is in its early stages of maturity, requiring significant development to reach a business-as-usual standard, including the creation of career pathways, training programmes, and a motivated, skilled workforce.

Key Responsibilities:

• Own and deliver the Cyber Security Culture, Education & Awareness Strategy, aligned to CAF Objective B and the broader Cyber Security strategy.
• Lead the development and implementation of a Cyber Security Capability Plan focused on behavioural change, education, and awareness.
• Define and maintain a career pathway and competency framework for the Security Culture, Education & Awareness (SCEA) capability.
• Lead the creation and development of the SCEA capability, including talent pipeline strategy.
• Collaborate with HR, Training, Communications, and Unions to embed cyber awareness into organisational learning and development programmes.
• Undertake capability analysis to assess resourcing needs and support the identification and provision of appropriately skilled resources.
• Manage the rotation and development of resources, supporting enterprise-wide priorities.
• Identify and recommend development opportunities for personnel within the capability, including professional qualifications and external accreditation.
• Lead the development and delivery of cyber awareness campaigns, training packages, and behavioural change initiatives.
• Oversee the evaluation of education and awareness programmes to ensure effectiveness and alignment with business needs.
• Manage relationships with external providers and institutions to support the capability pipeline and training delivery.
• Provide career development advice and support to individuals.
• Ensure accurate and robust records are maintained within HR systems, including SQEP role mapping.
• Support the development of centres of expertise and knowledge management arrangements for CS&IA.
• Represent CS&IA in internal and external forums, promoting best practice and continuous improvement.

Your skills and qualifications :

• Proven experience in leading cyber security awareness, education, or behavioural change programmes.
• Strong understanding of cyber security principles, particularly human factors and risk mitigation.
• Excellent communication and stakeholder engagement skills, with the ability to influence at all levels.
• Experience in designing and delivering training and awareness content across varied formats.
• Familiarity with regulatory frameworks such as the NCSC Cyber Assessment Framework (CAF).
• Demonstrable experience of working in complex organisations with diverse stakeholder groups.
• Degree or equivalent experience in Cyber Security, Communications, Education, or a related field.
• Experience in capability development, workforce planning, and strategic resource management.

Skills considered Desirable…

• Professional certifications such as SANS Security Awareness, SSCP, or similar.
• Experience working in or with nuclear or regulated industries.
• Understanding of Sellafield Ltd’s operations and ICT estate.
• Experience engaging with staff representatives and unions on cultural or behavioural initiatives.
• MSc or equivalent qualification in a relevant field.

Why us?

Sellafield Ltd is a unique place to grow your career, offering a remarkable blend of role variety, job security, personal growth, professional development, and truly significant work. This is your opportunity to tackle some of the biggest challenges in the nuclear, infrastructural and engineering worlds and create a clean and safe environment for generations to come. Explore Sellafield Ltd today.