Cyber Assurance Analyst

Job description

Ofgem is committed to making a positive difference for energy consumers through effective regulation of the market and close working with suppliers to ensure sustainable energy for consumers and businesses in the UK.

It is vital that operational systems and networks in the electricity and downstream gas sectors in Great Britain remain resilient against cyber and related security threats.

This role will be within the Cyber Profession's Cyber Regulation Team of at Ofgem who act as Competent Authority (CA) for implementing regulations for Operators of Essential Services (OES), to improve security and resilience in the Downstream Gas and Electricity (DGE) sector.

The key purpose of the role is to monitor, support, report and instruct against the regulatory frameworks such as the NCSC Cyber Assurance Framework to ensure operational systems and networks owned and/or managed, by Operators of Essential Services, in the electricity and downstream gas sectors in Great Britain, remain resilient against cyber and related security threats.

Candidates with Operational Technology, Industrial Automation and Control System or other relevant downstream gas and electricity industry experience are encouraged to apply.

Key Responsibilities

• Support DGE organisations and industry to better comply with regulation, policies, procedures and guidelines.
• Contribute to the review and interpretation of items such as self-assessment reports, improvement plans, remediation plans and cyber investment plans.
• Contribute to DGE sector assurance activities.
• Produce and maintain documentation with a high degree of accuracy and consistent quality.
• Support incident reporting functions.

Person specification

Key Outputs and Deliverables

• Record outputs and decisions from engagement or assurance activities and meetings.
• Attend and engage on regular meetings with 3rd parties.
• Record outputs from analysis of evidence.
• Analysis data and produce reports.
• Maintain trackers and schedules.
• Update guidance documentation.

Essential Criteria

• [Lead criteria] Must be able to achieve and maintain SC clearance.
• [Lead criteria] Proven work experience as a Cyber Analyst or similar role with demonstrable experience of the following activities:

• Reviewing cyber security data and making recommendations.
• Client-facing experience.
• Excellent writing skills evidenced through report writing or similar.

• Extensive experience working collaboratively with diverse colleagues.
• Experience of indirect or direct line management such as coaching and mentoring junior colleagues.

Desirable Criteria

• Experience of security assurance in the energy or CNI (Critical National Infrastructure) industry.
• Experience in utilising operational technology / ICS related standards, NIS Regulations and NCSC Cyber Assurance Framework.

Behaviours

We'll assess you against these behaviours during the selection process:

• Communicating and Influencing
• Working Together
• Developing Self and Others

Technical skills

We'll assess you against these technical skills during the selection process:

• Please refer to the Candidate Pack and Role Profile attached for full details.

Benefits

Alongside your salary of £32,498, OFGEM contributes £8,774 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.

Ofgem can offer you a comprehensive and competitive benefits package which includes; 30 days annual leave after 2 years; Excellent training and development opportunities; The opportunity to join the generous Civil Service pension which also includes a valuable range of benefits; Hybrid working (currently 1 day a week in the office but is in review), flexible working hours and family friendly policies. Plus lots of other benefits including clean and bright offices based centrally, engaged networks and teams and an opportunity to contribute to our ambitious and important targets of establishing a Net Zero energy system by 2050. This exciting blend of professional challenge and personal reward identifies career opportunities at Ofgem as something to get excited about.

Things you need to know

Selection process details

This vacancy is using Success Profiles (opens in a new window) , and will assess your Behaviours, Experience and Technical skills.

When you press the 'Apply now' button, you will be asked to complete personal details (not seen by the sift panel), your career history and qualifications.

You will then be asked to provide a 1250 word 'personal statement' evidencing how you meet the essential and desirable skills and capabilities listed in the role profile. Please ensure you demonstrate clearly, within your supporting statement, how you meet each of the essential and desirable skills and capabilities.

The Civil Service values honesty and integrity and expect all candidates to abide by these principles. Ofgem take any incidences of cheating very seriously. Please ensure all examples provided are of your own experience. Any instances of plagiarism or other forms of cheating will be investigated and, if proven, the relevant applications will be withdrawn from the process.

Feedback will only be provided if you attend an interview or assessment.

Security

Successful candidates must undergo a criminal record check.

Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check (opens in a new window) .

See our vetting charter (opens in a new window) .

People working with government assets must complete baseline personnel security standard (opens in new window) checks.

Nationality requirements

This job is broadly open to the following groups:

• UK nationals
• nationals of the Republic of Ireland
• nationals of Commonwealth countries who have the right to work in the UK
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
• Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

Further information on nationality requirements (opens in a new window)

Working for the Civil Service

The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window) .

The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.

The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.