Senior Cyber Security Specialist

Westinghouse Electric Company LLC.; Preston; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

A leading company in the nuclear sector is looking for a Senior Cyber Security Specialist in Preston. This hybrid role involves managing IT governance and risk programs, ensuring compliance with industry standards, and developing risk assessments and security awareness programs. The ideal candidate will possess a strong background in information security with relevant certifications and experience.

Qualifications

• 7+ years of information security, governance, risk, and compliance experience.
• Professional certifications like CISA, CISM, CGEIT, CRISC, CISSP preferred.

Responsibilities

• Develop and maintain IT Governance and Risk Management programs.
• Establish frameworks for risk assessment and business continuity plans.
• Coordinate IT audit and assessment activities for UK operations.

Skills

Knowledge of security and control frameworks

Excellent written and verbal communication skills

Broad understanding of cyber-security threats

Knowledge of technological trends in information security

Ability to work well under pressure

Interpersonal skills

Education

Bachelor's degree in IT or related technical discipline

Master’s degree (preferred)

Job description

Social network you want to login/join with:

Senior Cyber Security Specialist, Preston

col-narrow-left

Client:

Westinghouse Electric Company LLC.

Location:

Preston, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Reference:

cfb34c98cb80

Job Views:

17

Posted:

17.06.2025

Expiry Date:

01.08.2025

col-wide

Job Description:

Reporting to the Deputy CISO, the Manager of UK IT Governance and Risk Management, is responsible for the design and execution of the IT Governance, IT Risk Management, Security Awareness, and Business Continuity/Disaster Recovery Programs in the United Kingdom. This Manager will maintain required certifications for UK operations and provide direct interface with representatives of the business at fuel and other operational locations.

THIS IS A HYBRID ROLE, BUT CANDIDATE MUST BE LOCAL TO THE SPRINGFIELDS UK SITE TO REPORT 3 DAYS A WEEK

Your day to day:

• Establish and maintain the management framework for all IT Governance activities in the United Kingdom
• Maintain certifications as required by governmental and regulatory authorities to operate in the UK
• Establish and maintain the process for capturing, assessing, decisioning, and reporting risks across the areas of UK operations, both internally as well as coordinating into the enterprise risk management program through the Chief Information Security Officer’s organization
• Support a framework for performing and overseeing the performance of IT risk assessments in accordance with established company risk management policies for projects and of suppliers/vendors where integration with IT systems is being proposed
• Ensure alignment with Legal, Compliance, contractual, regulatory, and additional organizational stakeholder requirements
• Create and maintain the Business Continuity Plan for IT services in the UK
• Create and maintain the Disaster Recovery Plan for IT services in the UK
• Identify, recruit, train, mentor, and develop direct report staff as required
• Establish appropriate risk decisioning matrices and ensure alignment to business objectives and values in coordination with the Chief Information Security Officer’s organization
• Develop on-demand reporting and dashboarding for self-service capabilities
• Coordinate and act as the primary point of contact for IT audit and assessment activities internal and external for UK operations
• Develop and maintain compliance metrics, supporting evidence, and required reporting based on the industry standards and best practices, such as Cyber Essentials, ISO 27001, NIST 800 series, and NERC-CIP, as appropriate
• Develop and maintain a Security Awareness Program that keeps materials and training relevant to the organization in order to reduce information security risk across Westinghouse

What you need to be successful in this role:

• Bachelor's degree in IT, related technical discipline, or equivalent experience. Master’s degree preferred
• 7+ Years of information security, governance, risk and compliance, IT Audit, or related work experience
• Professional certifications, such as CISA, CISM, CGEIT, CRISC, CISSP, or other applicable information security credentials is preferred

Skills and Competencies:

• Knowledge of security and control frameworks, such as Cyber Essentials, NIST CSF, ISO 27000, and ITIL
• Excellent written and verbal communication skills; interpersonal and collaborative skills; and the ability to communicate security and risk-related concepts to technical and nontechnical audiences
• A broad and deep understanding of cyber-security threats, vulnerabilities, controls, and remediation strategies in global enterprise environments
• Knowledge of technological trends and developments around information security and risk management
• Knowledgeable of Information Security best practices and regulatory and compliance requirements that impact security globally
• An ability to work well under pressure while maintaining a professional image and approach
• An ability to effectively influence others to modify their perspectives, plans, or behaviors through direct and indirect authority
• A team-focused mentality with the validated ability to work effectively with diverse partners
• Strong interpersonal skills with proven ability to manage multiple high visibility issues at a time