Cyber Risk Assessment Lead (SIzewell C)

Select how often (in days) to receive an alert:

The Sizewell C Jobs Service supports local people into exciting, long-term careers across our Project.#SZCJobs

Security Clearance: Active Security Clearance is required and must already be in place.

Location: London, Leiston or Ipswich, with hybrid working and a minimum of 2 days per week on-site. Travel to other Sizewell C locations may be required.

Contract: Permanent, full-time.

Salary: £82,186 depending on experience, plus benefits.

Benefits include:

• Annual Leave: 28 days per annum, increasing to 30 days after 5 years of service, plus bank holidays
• Bonus: 5% annual bonus
• Pension Contributions: Defined Contribution Pension Scheme with up to 7.5% employee contribution 15% employer contribution
• Life Assurance: Up to 8 x salary

Closing Date: 30th September 2026.

About the Role

The Cyber Risk Assessment Lead plays a key role in shaping and embedding Sizewell C's cyber risk assessment capability across the organisation.

Reporting into the Cyber Risk Manager, you will own and evolve the cyber risk assessment methodology, ensuring risks are identified, accessed and communicated consistently across the business. You will be responsible for maintaining assessment standards, overseeing the delivery pipeline and ensuring cyber risk assessments remain aligned with industry best practice and regulatory expectations.

Leading the day-to-day activities of the Cyber Risk Specialist and Cyber Risk Analyst, you will provide technical guidance, quality assurance and oversight of cyber risk assessments, helping ensure risk-informed decision making across one of the UK's most significant infrastructure projects.

Key Responsibilities

• Own and maintain the organisation's cyber risk assessment methodology, standards, tooling and quality framework.
• Drive continuous improvement of cyber risk assessment practices, incorporating lessons learned, emerging threats and industry best practice.
• Promote consistent adoption of cyber risk assessment processes across the organisation.
• Establish and maintain assessment criteria that ensure risks are evaluated and reported consistently.
• Ensure identified risks, control gaps and requirement shortfalls are appropriately documented and escalated through established risk management processes.
• Manage the pipeline of Security Risk Assessments (SRAs), ensuring assessments are prioritised, planned and delivered effectively.
• Provide leadership and direction to the Cyber Risk Specialist and Cyber Risk Analyst.
• Coordinate third-party support for cyber risk assessments where required.
• Review and quality assure assessment outputs to ensure consistency, accuracy and compliance with organisational standard.
• Lead complex, sensitive or high-impact cyber risk assessments and provide technical support to wider team members.
• Lead, develop and support the Cyber Risk Specialist and Cyber Risk Analyst, ensuring a consistent and effective approach to cyber risk assessment across the organisation.
• Support the Cyber Risk Manager in maintaining a current and accurate cyber risk position across the organisation.
• Ensure assessment findings are translated into actionable risk management outcomes and appropriately reflected within the cyber risk register.
• Contribute to the tracking and reporting of identified cyber risks and mitigation activities.
• Support integration between cyber risk management and wider enterprise risk management processes.
• Assist with business impact assessments, threat modelling exercises and risk analysis activities.

Knowledge & Skills

• Strong understanding of cyber security risk assessment principles, frameworks and methodologies.
• Knowledge of recognised approaches such as ISO 27005, NIST Risk Management Framework (RMF), FAIR, OCTAVE or equivalent methodologies.
• Ability to design, implement and maintain effective cyber risk assessment processes within a complex and regulated environment.
• Strong understanding of threat identification, vulnerability analysis, likelihood assessment, impact assessment and residual risk evaluation.
• Ability to translate complex technical findings into clear, business-focused risk insights.
• Understanding of how cyber risk aligns with wider enterprise risk management frameworks.
• Excellent stakeholder engagement, analytical and communication skills.
• Ability to present findings confidently to governance forums, leadership teams and non-technical audiences.
• Understanding of the UK nuclear regulatory landscape and the role of the Office for Nuclear Regulation (ONR).
• Knowledge of threat intelligence processes and how they support cyber risk assessment and decision-making.
• Familiarity with cyber governance, assurance and compliance practices within highly regulated environments.

Qualifications & Experience

• Degree qualified, or equivalent, in Cyber Security, Information Security, Computer Science, Risk Management or a related discipline.
• Experience within cyber security, information security, risk management or security assurance, with a particular focus on cyber risk assessment.
• Demonstrable success designing, implementing or managing cyber risk assessment frameworks and methodologies.
• Proven ability to identify, assess and communicate cyber security risks in a structured and consistent manner.
• Experience conducting or overseeing cyber risk assessments using recognised methodologies such as ISO 27005, NIST RMF, FAIR or OCTAVE.
• Production of risk reports and management information for senior stakeholders, governance bodies or executive audiences.
• Experience presenting cyber risk findings and recommendations to both technical and non-technical stakeholders.
• Ability to convert assessment outcomes into actionable risk management plans and mitigation activities.
• Relevant professional certification such as CISSP, CISM, CRISC or equivalent.
• Eligibility for, or current holder of, Security Check (SC) clearance.
• Experience within the nuclear sector or another highly regulated Critical National Infrastructure environment, such as defence, energy, transport or water.
• Supporting governance committees, assurance reviews or regulatory activities in a technical or advisory capacity.

Why Join us?

• Be part of one of the most important low-carbon energy projects in the UK.
• Work in a mission-driven environment that values innovation, integrity, and long-term sustainability.
• Competitive salary, comprehensive benefits, and opportunities for career development.
• Flexible and hybrid working options.

For this role you must have evidence of right to work in the UK. As a project, we do not discriminate on the grounds of age, gender, race, colour, religion, disability or sexual orientation, and we welcome applications from all sections of the community.

Why Join Us?

For more than 60 years, nuclear power stations in the UK have been quietly keeping Britain fuelled with massive amounts of home-grown energy.

Our teams up and down the country are proudly continuing to serve the nation – but they also have an eye on the future.

EDF is leading the UK's nuclear renaissance with the construction of a new nuclear power station at Hinkley Point C and plans for a new power station at Sizewell C in Suffolk.

Nuclear power is the most reliable, low-carbon energy source currently available to the UK. EDF is playing a key role in the development of nuclear sites, while Hinkley Point C will provide low-carbon electricity to meet 7% of the UK demand. The project is already making a positive impact on the local and national economy as well as boosting skills and education.

We’re not just building new nuclear power stations. We’re developing careers, upskilling generations and creating thousands of employment and apprenticeship opportunities across a variety of skills areas.

It takes a special kind of person to work in the nuclear energy industry and although we have thousands of them there’s always a need for more.

Our industry has a mind‑boggling range of opportunities and more jobs, and in more places, than you might think. But it’s also an industry which is changing.

We’re a responsible business and proud to be Britain’s biggest generator of zero carbon electricity. With size, age and experience, we believe we can do even more.

#J-18808-Ljbffr