Cyber Security Assurance Specialist

EDF Energy; Gloucester; Hybrid; GBP 40,000 - 80,000

Job description

About the Role

Gloucester Business Park, Gloucester - with flexibility of working from home, minimum 3 days a week in the office.

Do you have a passion for Cyber Security and a keen eye for protecting critical information? If so, join EDF as a Cyber Assurance Specialist and play a key role in safeguarding the integrity of our IT and OT environments across our nuclear sites!

The Opportunity…

As a Cyber Security Assurance Specialist, you’ll be at the forefront of protecting EDF Energy’s nuclear operations, ensuring compliance with strict security regulations while safeguarding sensitive business information.

You’ll conduct security reviews, assess risks, and support regulatory interactions, working closely with the Cyber Security and Information Assurance (CS&IA) team.

This role offers a unique opportunity to influence security strategy, drive compliance with national and international standards, and strengthen the resilience of our nuclear fleet.

Pay, benefits and culture…

Alongside a competitive salary and a market-leading pension scheme, your package will include a range of benefits, from the big and formal to the small and personal.

We’re talking about everything from enhanced parental leave to electric vehicle leasing, health insurance to product discounts, critical illness insurance to technology vouchers, gym membership to season ticket loans.

At EDF UK, we embrace flexibility while recognising that everyone's working needs are different. Whether you're in our office spaces, on site, or working remotely, we promote an environment that supports collaboration, connection, and comfort. No matter where you are, our priority is to make sure you feel safe, valued and celebrated.

Here, we do right by each other and everyone’s welcome. We’re on an action-oriented journey, championing equity, diversity, and inclusion. We’d like our future workforce to have an equal gender balance, represent a broad mix of people from minority ethnic backgrounds, LGBTQ+, those with a disability and supporting social mobility.

We’re a disability confident employer and we’ll do all we can to help with your application. Please let us know if you need to request reasonable adjustments.

We take pride in fostering a dynamic and inclusive environment, where the diverse backgrounds and experiences of our employees drive fresh thinking and innovation. We understand that success means different things to different people. We believe there are multiple definitions of what it means to succeed. That’s why we support you to pursue a career that’s unique to you. Because success is personal.

What you’ll be doing…

You will take the lead in conducting internal security assurance reviews, performing audits and inspections across EDF Energy sites to ensure compliance with ISO27001, ONR SyAPs, and the HMG Security Policy Framework. Risk management will be a key focus, as you assess security policies, implement best-practice controls, and drive compliance with national and international standards. Additionally, you will play a crucial role in investigating security incidents, ensuring remedial actions are effectively tracked and implemented.

Collaboration will be at the heart of this role, as you act as the primary point of contact for security findings, working closely with nuclear licensees and regulatory bodies to enhance cyber resilience. You will also represent EDF Energy in regulatory discussions and industry forums, engaging with organisations such as the ONR (CNSS) to influence security strategy and best practices. By maintaining security-related data and compiling reports, you will provide valuable insights that support risk management and accountability.

In addition to these responsibilities, you will contribute to EDF Energy’s emergency response scheme, ensuring a rapid and effective reaction when required. Your expertise will be instrumental in strengthening the security posture of our nuclear operations, safeguarding critical information, and supporting the ongoing resilience of our energy infrastructure.

Who you are…

You’ll have a strong understanding of ISO27001, the HMG Security Framework, and risk assessment methodologies. You’ll bring experience in conducting audits, inspections, and investigations, with the ability to clearly communicate security findings to stakeholders. Your analytical and problem-solving skills will enable you to balance business needs with security requirements effectively, ensuring compliance across EDF Energy’s nuclear operations.

You’ll have a degree in a relevant field or equivalent professional experience, along with knowledge of key industry regulations such as ONR SyAPs and NISR 2003. Ideally, you hold or are working towards a recognised security qualification such as CISSP or CISM, and experience within the nuclear sector or government security would be advantageous. Your ability to assess risk, implement best-practice controls, and contribute to security strategy will be essential in this role.

We’re looking for experienced professionals who are ready to take on this critical cyber security role. If you’re passionate about protecting EDF Energy’s nuclear infrastructure and want to play a key part in maintaining its resilience, apply now and join us in securing the future of energy.

Closing date for applications: 2nd April 2025

Please note that candidates must be eligible for and willing to obtain Security Check (SC) clearance for this role.

#NuclearServicesJobs #HinkleyPointCJobs #LI-Hybrid #DestinationNuclear #EDFNuclearJobs