Cyber Requirements & Compliance Specialist (Sizewell C)

Requirements & Cross-Functional Support

• Monitor developments in the cyber threat landscape, regulatory environment and industry best practice.
• Translate regulatory, business and security requirements into clear and actionable documentation for technical and non-technical audiences.
• Support the adoption of secure-by-design principles across the organisation.
• Work with security architecture, risk and controls teams to ensure policies, requirements and controls remain aligned.
• Contribute to the definition and maintenance of cyber security requirements that support organisational objectives and regulatory expectations.
• Support continuous improvement initiatives across cyber governance, compliance and requirements management activities.

Governance, Audit & Reporting

• Support governance forums by providing updates on compliance performance, regulatory readiness and emerging risks.
• Assist with the preparation of compliance reports, regulatory submissions and briefing materials.
• Produce audit-ready documentation and management information for governance and leadership audiences.
• Contribute to assurance reviews, audits and evidence-gathering activities.
• Support engagement with regulators and external stakeholders where required.
• Track regulatory findings, recommendations and actions through to closure.
• Assist with external certification activities, including ISO 27001 and Cyber Essentials Plus.

Knowledge & Skills:

• Strong understanding of cyber security principles, governance frameworks and compliance management practices.
• Knowledge of compliance monitoring processes, including evidence management, gap analysis, remediation tracking and audit readiness.
• Ability to interpret regulatory requirements, industry standards and organisational needs, translating these into clear policies, standards and requirements.
• Excellent written communication skills, with the ability to produce high-quality policies, procedures, reports and compliance documentation.
• Strong organisational skills and attention to detail, with the ability to manage structured documentation and evidence to an auditable standard.
• Understanding of policy lifecycle management, including drafting, review, approval and version control processes.
• Strong stakeholder engagement and communication skills, with the ability to work effectively across technical and business functions.

Desirable

• Familiarity with ISO 27001/27002, NIST Cyber Security Framework (CSF) 2.0 and the NCSC Cyber Assessment Framework (CAF).
• Understanding of the UK regulatory landscape for cyber security, including ONR Security Assessment Principles (SyAPs) and the NIS Regulations.
• Experience using compliance management platforms, document management systems or evidence repositories.
• Awareness of security architecture principles and their relationship to governance and policy frameworks.

Qualifications & Experience:

• Degree qualified, or equivalent, in Cyber Security, Information Security, Computer Science, Business or a related discipline.
• Experience within cyber security, information security, governance, compliance or risk management.
• Demonstrable involvement in mapping organisational controls, processes or documentation to recognised frameworks, standards or regulatory requirements.
• Contribution to compliance assessments against recognised standards such as ISO 27001, Cyber Essentials Plus, NCSC CAF or equivalent frameworks.
• Participation in audits, assurance activities, regulatory inspections or evidence-based compliance programmes.
• Drafting and maintaining cyber security policies, standards, procedures, reports or governance documentation.
• Management of policy libraries, document repositories or structured compliance evidence.
• Experience supporting governance forums, risk management activities or compliance initiatives.

Desirable

• Professional certification such as ISO 27001 Lead Auditor, ISO 27001 Lead Implementer, CISSP, CISM, CRISC or CompTIA Security+.
• Experience within a highly regulated sector such as nuclear, energy, utilities, healthcare, financial services or the public sector.
• Involvement in cyber security strategy development, security transformation programmes or assurance activities.
• Familiarity with requirements management methodologies or tools within cyber security or technology environments.

Why Join us?

• Be part of one of the most important low-carbon energy projects in the UK.
• Work in a mission-driven environment that values innovation, integrity, and long-term sustainability.
• Competitive salary, comprehensive benefits, and opportunities for career development.
• Flexible and hybrid working options.

For this role you must have evidence of right to work in the UK. As a project, we do not discriminate on the grounds of age, gender, race, colour, religion, disability or sexual orientation, and we welcome applications from all sections of the community.