Cyber Security Manager

Job description

Originally named, Great British Nuclear, Great British Energy - Nuclear is an arm's length body of the Department for Energy Security and Net Zero, dedicated to supporting the development and deployment of new nuclear technologies in Great Britain. We play a crucial role in advancing nuclear new build, ensuring the UK's energy security and achieving net-zero carbon emissions. Great British Energy - Nuclear focuses on fostering innovation, facilitating investment, and coordinating efforts across the nuclear industry to build a resilient and sustainable energy future.

Great British Energy - Nuclear's first step was to start the technology selection process for Small Modular Reactors (SMRs) in 2023. SMRs can potentially be quicker to deploy and less expensive to build than traditional nuclear power plants because they are smaller, have factory based modular manufacturing and more flexible deployment options. In June 2025, Great British Energy - Nuclear announced that Rolls-Royce SMR had been selected as the preferred bidder to build the UK's first SMRs, following a technology selection process that began in 2023.

Great British Energy - Nuclear is aiming to deliver fast, based on a supportive and collaborative culture which values equality and diversity and creates an inclusive workplace.

The Project Team Safety, Licensing and Assurance Function is seeking an experienced Cyber Security Manager to lead the development and implementation of cyber security strategies for our SMR project. This role will focus on information in an IT realm, with a strong focus on information exchange across an international user community. The role holder will ensure compliance with nuclear industry standards and regulatory requirements.

You will be responsible for safeguarding critical national infrastructure, managing cyber risks, and ensuring the secure generation, transmission and storage of protected information throughout the lifecycle of the SMR power station.

Please note, a full job description is available and attached to this advert.

Accountabilities & Responsibilities:

• Lead the development and implementation of cyber security strategies for the SMR project including an international user community.
• Ensure compliance with relevant nuclear and cyber security standards, which could include:
  -ISO/IEC 27001 (Cyber Security Management)
  -UK NIS 18 regulations
  -NCSC guidance
  -NIST SP 800 Series
  -Codes and Standards for the Cyber Security of AI (2025) - DSIT
  -NR Security Assessment Principles (SyAPs)
• Develop and maintain the Cyber Security and Information Assurance Framework for the SMR project.
• Collaborate with engineering, IT, and regulatory teams to integrate cyber security into system design and delivery.

Key Stakeholder Management

• Provide specialist advice to the project on all matters concerning cyber security and assurance.
• Manage and oversee the internal relationships with security stakeholders. Leading external cyber security relationships, to include NCSC and ONR.

Policy and Process

• Create and maintain policies and associated processes required to enable risk-informed decision making concerning the protection of information.
• Ownership of forward work plans, that considers the capability and capacity required to meet the demands of the project.

Innovation for Cyber Security:

• Promote & Suuport innovation for cyber security, to consider modern technologies and/or approaches.
• Support economic efficiency and value for money for the taxpayer through robust oversight of all elements of cyber security and assurance of the project and its supply chain, throughout the nuclear lifecycle.

Reporting & Performance Management:

• Manage, review, and analysis of cyber security events and incidents across all elements of the project, to identify trends, risks, and areas for improvement.
• Develop supplier enablement materials, including training and awareness resources.

Knowledge, Skills and Experience required:

• Experience in cyber security management within critical infrastructure or nuclear environments.
• Good knowledge in Information Technology (IT) and cloud-based technologies.
• Good working knowledge of relevant codes, standards, regulatory frameworks, and the UK Government Security Classification scheme.
• Experience with Cyber Security Management Systems (CSMS) and Information Security Management Systems (ISMS) requirements, implementation, and lifecycle management.
• Strong stakeholder engagement and communication skills.
• Experience in nuclear licensing and regulatory engagement.
• Familiarity with SMR technologies and digital twin environments.
• Ability to work in a high-assurance, safety-critical context.
• Strategic thinker with a proactive approach to emerging threats and technologies.

Qualifications

• Degree in Cyber Security, Information Assurance, Engineering, or a related field, or equivalent professional experience.
• Relevant certifications (e.g. CISSP, CISM, ISO 27001 Lead Implementer) (Desirable)

Please note, this role may require candidates to obtain and maintain the appropriate level of National Security Vetting.

We recognise that candidates may not meet every requirement listed. If your experience is not an exact match but you believe you have the skills, knowledge and potential to succeed in the role, we encourage you to apply.

Please complete our short application form to apply for this role. If shortlisted, one of our Talent Attraction Leads will be in touch to discuss the position in more detail. Good luck with your application!

At GBE-N, we are committed to building an inclusive workplace where everyone can thrive. We value diversity and encourage applications from all backgrounds, including underrepresented groups. If you require any support or adjustments to help you with your application, please contact us at , and we will be happy to provide assistance.