OT Cyber Security Specialist

Gloucester or Glasgow. Hybrid, with 2/3 days per week in the office, and some travel required.

Are you an experienced Cyber Security specialist from an Operational Technology (OT) background? Or, are you someone experience in Operational Technology looking for a career in Cyber Security?  Are you looking for an exciting opportunity, that is rewarding, and where you can really make a difference?

If so, we have a role for you!

The Opportunity…

We are looking for an OT Cyber Security Specialist to join our Nuclear Security Branch, as part of our Nuclear Services Business.

Nuclear Services is a specialist technical area, and we bring together technical capabilities to support the Hinkley Point C (HPC) and Sizewell C (SZC) nuclear new build projects and the existing Nuclear Operations operating stations and decommissioning sites.

As an OT Cyber Security Specialist, you will support the OT Cyber Requirements Manager to improve and assure the security of Operational Technology (OT) assets across EDF’s nuclear power station fleet.

You will work with other members of the team to provide support relating to network, system and device security, including input to governance, design review, risk assessment and incident response.

Pay, benefits and culture…

Alongside a salary from £50,000 (negotiable depending on experience), we offer a competitive benefits package, including a company pension scheme, a wide range of flexible benefits to suit your lifestyle, and the opportunity to earn a bonus. 

At EDF, everyone’s welcome. We strive to create an inclusive and diverse environment where everyone has a voice and where you feel confident being yourself.  We’re committed to equality, diversity and inclusion.  We’d like our future workforce to have an equal gender balance, represent a broad mix of people from minority ethnic backgrounds, LGBTQ+, those of us with a disability and supporting social mobility. 

We’re a disability confident employer and we’ll do all we can to help with your application, making adjustments as you need. 

We’ll value the difference you bring and offer opportunities for you to thrive and succeed.

What you’ll be doing…

• Supporting the OT Cyber Requirements Manager in the implementation and assurance of standards with Information Security communications and in improving the security culture of the organisation.
• Understanding OT functionality within the context of Nuclear Site Licence Conditions, Safety Cases, and Nuclear Site Security Plans.
• Understanding and advising on compliance with relevant regulatory and EDF Energy policy and Company Specification requirements. Escalating non-conformances as appropriate.
• Establishing and maintaining a good working relationship with on-station IT/OT Cyber & Information Security Station Leads, PCSSs, IT Services Team Leaders, Site Heads of Security, and other key personnel.
• Promoting Information Security policy, procedures and practice to staff, contractors and 3rd parties, particularly at the Nuclear Operations fleet power stations.
• Investigation, coordination and reporting of Cyber/Information Security incidents as directed by the OT Cyber Requirements Manager, ensuring incidents are followed up and addressed appropriately.
• Assisting with the development of strategies and solutions to mitigate identified Information Security risks and to assure the security of OT.
• Performing formal Information Security risk assessments to ensure that risks posed to the Nuclear Operations environment are correctly identified and appropriate mitigations selected.
• Providing additional support necessary to enable Information Security activities across Nuclear Operations in support of the wider Information Security team as directed by the OT Cyber Requirements Manager and Chief Information Security Officer (CISO).

Who you are…

Your background may include some of the following:

• HND/Degree in a relevant subject.
• A working knowledge of cyber security standards and frameworks (e.g. NIST or IEC62443), and some experience of applying these to an operational role. With an understanding or willingness to learn about safety engineering.
• Experience working on complex projects.
• The ability to work on own initiative, build effective relationships with internal and external stakeholders as part of a wider information and cyber security team.
• Excellent written and oral communication skills, and an ability to think critically and logically in a highly regulated environment.
• Experience of influencing stakeholders to bring about change.
• Understanding OT functionality within the context of Nuclear Site Licence Conditions, Safety Cases, and Nuclear Site Security Plans is desirable.
• Relevant cybersecurity qualifications such as Security+, CISSP, GICSP, IEC62443 fundamentals or equivalents are desirable.

Please note, applicants must be able to obtain national security clearance at level SC.

Closing date: 9th May 2024

Join us and together we can help Britain achieve Net Zero.

#EDFNuclearServices #DestinationNuclear #EDFNuclearJobs