Security Improvement Programme Lead

Morgan Hunt Recruitment; Greater London; Hybrid; GBP 138,000 - 157,000; Full time

Job summary

Government Body is seeking a Security Improvement Programme Lead to deliver high-profile cyber security and resilience initiatives across the UK energy sector. You will lead CAF v4 transition and develop a scalable onboarding process for newly designated Operators of Essential Services, while managing multiple workstreams and engaging senior stakeholders to drive delivery.

This is an initial 6-month contract, hybrid working with 1 day per week on-site in London, Cardiff or Glasgow, and active SC

Qualifications

• Proven experience leading complex cyber security or resilience programmes.
• Strong governance and stakeholder management experience.
• Excellent communication and influencing skills across senior stakeholders.
• Experience managing multiple workstreams, risks, dependencies and priorities.
• Knowledge of cyber security resilience in regulated environments.

Responsibilities

• Lead CAF v4 transition programme across the Downstream Gas and Electricity sector.
• Develop CAF v4 related products, guidance and supporting documentation.
• Design scalable onboarding process for newly designated OES.
• Coordinate with government, regulatory and industry partners on cyber resilience priorities.
• Engage senior stakeholders to drive programme delivery.
• Manage risks, dependencies, actions and milestones; report on progress.
• Monitor regulatory developments affecting cyber resilience.
• Identify opportunities to improve cyber security and resilience across the sector.

Skills

Cyber security leadership

Stakeholder management

Programme governance

Communication skills

Regulated environment knowledge

Job description

Security Improvement Programme Lead

Government Body
£750-£850 per day - Inside IR35
Hybrid - 1 day per week in London, Cardiff or Glasgow
Active SC Clearance Required
Initial 6-month Contract

We are working on behalf of a Government Body to recruit an experienced Security Improvement Programme Lead to deliver high-profile cyber security and resilience initiatives across the UK energy sector.

This is an excellent opportunity for a senior security, cyber resilience or programme professional to lead complex improvement programmes supporting the resilience of critical national infrastructure.

The Role

You will lead two key initiatives:

• The Cyber Assessment Framework (CAF) v4 transition programme across the Downstream Gas and Electricity sector.
• Development of a resilient and scalable onboarding process for newly designated Operators of Essential Services (OES).

You will manage multiple workstreams, coordinate stakeholders and subject matter experts, establish programme governance and ensure delivery against agreed outcomes, milestones and timelines.

Key Responsibilities

• Lead planning, delivery and governance of the CAF v4 transition programme.
• Develop CAF v4-related products, guidance and supporting documentation.
• Design and implement a scalable onboarding process for newly designated OES.
• Work with government, regulatory and industry partners to align cyber resilience priorities.
• Engage and influence senior stakeholders to drive programme delivery.
• Manage risks, dependencies, actions, milestones and programme reporting.
• Monitor regulatory, policy and legislative developments affecting cyber resilience.
• Identify opportunities to improve cyber security and resilience across the sector.

About You

You will have:

• Proven experience leading complex cyber security, resilience, security improvement or transformation programmes.
• Strong programme governance and stakeholder management experience.
• Excellent communication and influencing skills across senior, technical and external stakeholders.
• Experience managing multiple workstreams, risks, dependencies and competing priorities.
• A strong understanding of cyber security and resilience within regulated environments.

Desirable

• Government, Energy or Critical National Infrastructure (CNI) experience.
• Knowledge of Operational Technology (OT) and IT security.
• Experience with NCSC CAF, IEC 62443 or ISO 27001.
• Knowledge of the NIS Regulations 2018 and UK cyber resilience landscape.
• Experience developing security governance, assurance or onboarding processes.

Contract Details

Day Rate: £750-£850 per day
Length: Initial 6-month Contract
IR35: Inside IR35
Location: London, Cardiff or Glasgow
Working: 1 day per week on-site
Clearance:Active SC Clearance essential