The Opportunity

Are you looking for a career which is rewarding, at the cutting edge of project development and where you can really make a difference? Come and join our expanding Sizewell C (SZC) team and work on one of the most exciting projects in the UK, whilst being at the forefront of the UK’s climate change agenda and energy policy. The SZC Project is a ~£20bn nuclear new build project in Suffolk which is currently seeking planning approval and financing from HMG and investors, with a view to start construction in 2023. When completed, it will provide dependable electricity to 6 million homes for 60 years supporting our objective to help Britain achieve Net Zero by 2050.

As an Operational Technology (OT) Cyber Security Lead, you’ll be responsible for the intelligent replication of security assessments and requirements establishing the secure design and deployment of OT inclusive of Computer Based Control and Instrumentation (CBC&I), Computer Based Systems Important to Safety (CBSIS), CBC&I Process Control Systems and CBC&I Smart devices and sensitive technology requirements from Hinkley Point C (HPC) to Sizewell C (SZC). You will be key to ensuring that adequate security arrangements are defined and applied to protect the availability, integrity and confidentiality of OT systems designed and delivered to SZC throughout its lifecycle.  

Our teams are set up to work flexibly, therefore you don’t have to live in London. If you’re able to travel to the London office to collaborate with your team and stakeholders when required, you can be based anywhere in the UK. We provide a full suite of IT equipment to ensure that our employees can work from home comfortably and effectively. 
 

The Role

We’re looking for someone who can provide OT cyber security expertise to support risk assessments impacting the OT systems utilising our HPC security risk methodology and provide recommendations on cyber controls to mitigate risks.

Working in collaboration with OT suppliers and partners, you’ll be supporting the identification of adequate OT security controls and ensure the fulfilment of SZC security requirements during the design, implementation, validation, installation and commissioning of OT systems.

The role will allow you define adequate security requirements to protect the availability, integrity and confidentiality of OT systems designed and developed by key supplier organisations supporting the HPC construction.

Working closely with the HPC Instrumentation & Control (I&C) Cyber Security Lead and embedded within the Technical Services Organisation Pressure Water Reactor Technology (PWRT) Team; you’ll provide OT cyber security expertise to support risk assessments impacting the OT systems utilising intelligently replicated HPC security risk methodology and provide recommendations on cyber controls to mitigate risks accounting for legislative and regulatory requirements.

You’ll be able to provide expert OT cyber security advice and support to other team colleagues within the PWRT and SZC to ensure OT systems comply with security requirements and are delivered on time and to budget.
 

The Skills

You’ll bring your proven knowledge of Nuclear Industry Security Regulations and Standards (NISR 2003, ONR (CNSS) Security Assessment Principles). 

It would be great if you have a good understanding of cross domain security requirements.

We’d love for you to have experience in OT systems design, development and/or operation, including OT system security design.

An understanding of Information or OT security standards (ISO27000, IEC 62443, NIST SP or similar) is essential. 

Experience in performing OT risk assessments, threat assessments, and recognising OT systems vulnerabilities is crucial. 

You’re likely to hold degree standard education in related subject [or equivalent experience] and may also have a relevant Professional Certifications or Equivalent ISC2 CISSP, GIAC GICSP, or similar.

Experience in the following is highly desirable;

•    Experience with OT systems design, commissioning or operation in a nuclear plant environment

•    Experience in performing security assurance of Operational Technology systems (ICS/SCADA/IoT)

•    Experience of working in a high security environment

•    Experience of writing and delivering security requirements through contracts

•    Experience within a large project environment

You must currently hold or be able to achieve NSV SC.