Cyber Security Lead - Bridgwater, United Kingdom - EDF Limited

EDF Limited

Verified Company

Bridgwater, United Kingdom

1 week ago

Posted by:

Tom O´Connor

beBee Recruiter

Description

Hinkley Point C HPC Site with a mix of in-office and home working, with an expectation that this will move to daily working on site as the project progresses.
**_

Pay Grade:
C_**Are you an experienced Cyber Security professional with previous experience working in a regulated environment?

Then we might have a role for you.

We are currently looking to recruit the Pre-Operations Cyber Security Lead who will be responsible for developing the cyber security arrangements for the Hinkley Point C operational site.

These arrangements will be developed and delivered to meet the project milestones to mitigate all cyber and information security threats.

If successful you will also take the responsibility for liaising with the construction site security team and the Technical Support Organisation to ensure a smooth transition from construction to nuclear operational arrangements.

You will ensure that the necessary cyber and information security capabilities and operating procedures are in place to deliver the required security outcomes.

Due to the nature of the role, you will be required to obtain, and hold, National Security Vetting to SC level.

Pay, benefits and culture
In addition to a starting salary between £60,000 - £80,000 per annum, depending on experience, we offer flexible benefits that support our employees' physical, emotional and financial wellbeing

Examples include:

a market-leading company pension scheme, a bonus plan, health cover, electric vehicle leasing, mental health support and employee discounts.

At EDF, everyone's welcome.

We strive to create an inclusive and diverse environment where everyone has a voice and where you feel confident being yourself.

We're committed to equality, diversity and inclusion.

We'd like our future workforce to have an equal gender balance, represent a broad mix of people from minority ethnic backgrounds, LGBTQ+, those with a disability and supporting social mobility.

We'll value the difference you bring and give you opportunities to thrive and succeed.

What you'll be doing

Develop and report progress against a schedule which identifies the key activities that need to be completed to ensure cyber security legal compliance and an effective station security organisation for the HPC operational site.
Oversee the development of all station cyber security activities, including those undertaken by contractors, to ensure they are carried out with full regard to site license requirements, statutory regulations, company and location directives, procedures (including nontechnical INFOSEC and the protection of SNI) and safety rules.
Develop and maintain an effective collaborative working relationship with the TSO Nuclear Security Function and central security design authority.
Define and develop site cyber security standards that are in accordance with regulatory directives, the nuclear site licence, company and site policies (including but not exclusive to; Security Assessment Principles (SyAPs), the UK Design Basis Threat (DBT), NISR 2003, Nuclear Site Security Plan (NSSP) and the Emergency Plan.
Provide first response to cyber incidents working alongside EDF/TCO Incident Management and Contract Partners Information Security Teams.
Act as the cyber security risk manager ensuring close collaborative working with all relevant departments.
Provide cyber security advice from an operational station's perspective to teams designing security facilities and equipment.
Support the development of information security training for the operational power station.
Support the promotion of good security behaviours and practices through the project culture work stream.

Who you are

Essential

Relevant Professional Certifications: ISC2 CISSP, ISO27001 Auditor, GIAC GICSP
Technical cyber security and information assurance knowledge and standards (ISO27000, NCSC, NIST SP, GDPR)
Understanding of NCSC's Cyber Security Essentials and UK Cabinet Office's Security Policy Framework (SPF).
Experience of working in a lead role in a dynamic environment
Proven communication and people skills including leadership capability and senior stakeholder engagement.
Proven ability and experience of security risk management.
Computer literacy adequate for the role, including MS Office, technical awareness and ability to understand electronic security systems and relevant plant systems

Desirable

Knowledge of Nuclear Industry Security Regulations and Standards (NISR 2003, ONR (CNSS) Security Assessment Principles).
Experience performing initial first response as part of a wider incident response programme.
Knowledge of Nuclear Site Licence requirements (notably LC11), emergency arrangements and Health & Safety Legislation.
A good understanding of cross domain security requirements
CS&IA experience in a large infrastructure project environment
Experience of working in a high security environment.

Closing date: 24th Feb 2