Senior Security Strategist - IT/OT for Critical Infrastructure

Ofgem; Cardiff; Hybrid; GBP 57,000 - 70,000; Full time

Benefits offered by this job

Hybrid working

Training & development

Civil Service pension

30 days annual leave

Job summary

Ofgem, the energy regulator for Great Britain, is seeking a Principal Security Specialist (IT/OT) to lead design, assessment, and implementation of innovative security solutions for critical systems. The role sits in the Cyber Guidance & Monitoring team and involves engaging with diverse stakeholders and delivering secure-by-design guidance.

You will apply national guidance (NCSC) and security frameworks to enhance resilience across energy operators, with hybrid working arrangements and strong

Qualifications

• Experience leading security risk management in complex environments.
• Ability to provide security guidance to stakeholders responsible for critical systems.
• Experience applying security frameworks (NCSC CAF, NIST CSF, ISO 27001, CIS Controls, IEC/ISA 62443).
• Strong stakeholder management and ability to communicate risks to technical and non-technical audiences.

Responsibilities

• Lead high-profile security improvement projects and design security solutions.
• Engage with internal and external stakeholders to shape security posture.
• Apply secure-by-design principles and align with NCSC guidance.
• Provide strategic leadership in cyber security within the G&M team.

Skills

Security leadership

Security improvement planning

Stakeholder engagement

Security frameworks application

Technical and non-technical comms

Tools

NCSC CAF

NIST CSF

ISO 27001

CIS Controls

IEC/ISA 62443

Job description

Ofgem, the energy regulator for Great Britain, is seeking a Principal Security Specialist (IT/OT) to lead design, assessment, and implementation of innovative security solutions for critical systems. The role sits in the Cyber Guidance & Monitoring team and involves engaging with diverse stakeholders and delivering secure-by-design guidance.

You will apply national guidance (NCSC) and security frameworks to enhance resilience across energy operators, with hybrid working arrangements and strong