Senior Cyber Risk Lead - Hybrid, SC Cleared

Sizewell C Company; Greater London; Hybrid; GBP 74,000 - 90,000; Full time

Benefits offered by this job

Annual leave 28 days + bank holidays

5% annual bonus

Pension scheme up to 7.5% employee / 7

Job summary

Sizewell C Company is seeking a Cyber Risk Assessment Lead to shape and embed cyber risk capabilities across the organisation. You will own the assessment methodology and lead a team to deliver risk insights to governance forums.

Role requires active SC clearance, strong knowledge of ISO 27005, RMF, and threat modelling, and the ability to translate findings into actionable risk management actions for a major UK infrastructure project.

Qualifications

• Design and manage cyber risk assessment frameworks within a regulated environment.
• Produce risk reports and MI for senior stakeholders and governance bodies.
• Oversee risk assessments using recognised methodologies (ISO 27005, NIST RMF, FAIR, OCTAVE).
• Translate assessment outcomes into actionable risk management plans and mitigation actions.

Responsibilities

• Own and evolve the cyber risk assessment methodology, standards, tooling and quality framework.
• Lead day-to-day activities of the Cyber Risk Specialist and Cyber Risk Analyst.
• Manage the pipeline of Security Risk Assessments (SRAs) and ensure prioritisation.
• Coordinate third-party support for cyber risk assessments where required.
• Review and quality assure assessment outputs for consistency and compliance.
• Lead complex, high-impact cyber risk assessments and provide technical support to the team.
• Develop and support the Cyber Risk Specialist and Analyst for consistent practices.

Skills

Cyber risk assessment

ISO 27005

NIST RMF

Threat modelling

Stakeholder engagement

Communication skills

Regulatory alignment

Risk reporting

Education

Degree in Cyber Security

Information Security degree

Risk management qualification

Job description

Sizewell C Company is seeking a Cyber Risk Assessment Lead to shape and embed cyber risk capabilities across the organisation. You will own the assessment methodology and lead a team to deliver risk insights to governance forums.

Role requires active SC clearance, strong knowledge of ISO 27005, RMF, and threat modelling, and the ability to translate findings into actionable risk management actions for a major UK infrastructure project.