A unique place to grow your career

At Sellafield Ltd, we are harnessing our expertise; bringing together world-class skills and innovative technology to solve complex nuclear, infrastructure, and engineering challenges. By joining Sellafield Ltd, you join an amazing team of people, from all walks of life, where you can thrive in a connected, considerate culture of innovation, collaboration, and community; and play a significant part in
the UK’s sustainable nuclear future.

About the role

Responsible for establishing and delivering a robust second-line cyber assurance capability across Sellafield Ltd. The role ensures that cyber security controls, processes, and systems are independently assessed for effectiveness, compliance, and alignment with regulatory expectations and business risk appetite. Operating within a highly regulated and safety-critical environment, the postholder supports the Head of GRCA and the wider cyber security function by providing meaningful insight into the organisation’s cyber resilience and driving continuous improvement. The Team Lead works closely with risk and compliance leads, ICT delivery teams, and internal/external audit functions to ensure assurance is embedded, risk-informed, and proportionate. The role also supports regulatory engagement and contributes to maintaining confidence in Sellafield Ltd cyber security posture.

Key responsibilities

• Lead the development and execution of a risk-based cyber assurance strategy and annual plan, ensuring alignment with organisational objectives and regulatory expectations.
• Oversee the delivery of second-line assurance activities, including control effectiveness testing, process evaluations, and thematic reviews across IT, OT, technical architecture, and supply chain domains.
• Provide independent, expert assurance on the adequacy and effectiveness of cyber security controls, risk mitigations, and governance arrangements.
• Take ownership to proactively identify, assess, and escalate risks that could impact safety, compliance, and/or project delivery.
• Ensure timely communication of potential risks to relevant stakeholders and contribute to mitigation planning.
• Coordinate with first-line ICT, engineering, and supply chain teams, as well as third-line audit, to ensure assurance coverage is integrated, efficient, and comprehensive.
• Produce high-quality assurance reports, dashboards, and insights for senior leadership, governance forums, and regulatory stakeholders.
• Support the Head of GRCA in managing regulatory engagement, including preparation for inspections, audits, and the provision of defensible assurance evidence.
• Monitor, track, and verify the remediation of assurance findings, ensuring timely closure and embedding of lessons learned.
• Maintain up-to-date knowledge of emerging cyber threats, regulatory developments, and assurance best practices to inform planning and continuous improvement.
• Champion a culture of cyber accountability, transparency, and maturity through effective stakeholder engagement and assurance-led insights.
• Mentor and develop cyber assurance advisors, fostering capability growth and consistency in assurance delivery.

Your Skills and Qualifications

Essential
• Strong experience in cyber assurance, risk management, audit, or control testing within a regulated environment.
• Proven experience building or scaling assurance functions in complex technical environments spanning IT/OT, and supply chain domains.
• Experience managing managers in technical functions, including performance management, capability development, and resource planning.
• In-depth understanding of cyber security frameworks.
• Experience designing and delivering assurance programmes and reporting to senior stakeholders.
• Ability to assess technical and procedural controls and communicate findings clearly.
• Strong analytical, reporting, and stakeholder engagement skills.
• Degree or equivalent experience in cyber security, audit, or a related field.
• Relevant certifications (e.g., CISA, ISO 27001 Lead Auditor, CISSP).

Desirable
• Experience in the nuclear or critical national infrastructure (CNI) sector.
• Familiarity with ONR SyAPs, NISR 2003, and HMG SPF.
• Experience with assurance automation or continuous control monitoring.
• Knowledge of risk-based assurance methodologies.

Why us?

At Sellafield Ltd, we are committed to supporting our employees in fulfilling their potential. With having 100 years of work in front of us, we offer comprehensive training and development opportunities, enabling you to feel inspired in your role. Whatever area you join us in, you’ll find a genuinely exciting and rewarding career.

Making sure our employees feel supported is important to us. Therefore, to help you get the most out of life in and outside of work, we also offer a range of employee benefits:
• You will benefit from an annual bonus of up to 10% – 15%, made up of company and personal performance
• An attractive defined contribution pension scheme – the company will match up to 13.5% for a 7% employee contribution!
• 30 days annual leave + bank holidays. Plus, the ability to purchase an extra 2.5 days per year.
• The ability to carry over 10 days annual leave each financial year
• Paid Sick Leave
• Family Friendly Policies – Visit our Rewards & Benefits page to read more
• Cycle to Work Scheme
• Lifestyle Benefits sasra.co.uk
• Learning & Development Opportunities https://careers.sellafieldsite.co.uk/work-with-us/learning-and-development/
• Reward & Recognition Policies
• Welfare & Employee Assistance Programme
• Free Aviva Health App & Annual Health Check
• MyDiscounts – Employee Savings & Discounts
• MyBenefits – A Charity Giving Scheme
• Many, many more! Click this link to visit our Rewards & Benefits page: https://careers.sellafieldsite.co.uk/work-with-us/rewards-and-benefits/

Sellafield Ltd is a unique place to grow your career, offering a remarkable blend of role variety, job security, personal growth, professional development, and truly significant work. This is your opportunity to tackle some of the biggest challenges in the nuclear, infrastructural and engineering worlds and create a clean and safe environment for generations to come. Explore Sellafield Ltd today.

Additional Information

• The closing date for this vacancy is 31st August 2026.

• In the event of a high number of responses to any advert, Sellafield Ltd reserves the right to close the advert early. Once closed, the advert will be removed from our website. We encourage you to submit your application as soon as possible to avoid disappointment.

• As part of the application process you will be asked to provide evidence of your qualifications. Attaching them at application stage will ensure a smooth process and prevent delays.

A minimum of 3 GCSEs at Grade 4/Grade C or above in English, Maths & Science (or equivalent). Other equivalent qualifications may be considered.

• Please regularly check your Spam/Junk folders for news about this vacancy, correspondence could contain invitations to interview and other important updates.

• Sellafield Ltd are recognised as a Disability Confident Employer (Level 3). Disability Confident employers offer an interview to disabled applicants that meet the minimum criteria for a vacancy. Sellafield Ltd define the minimum criteria as the ‘essential skills’ which are listed on the vacancy notice. Whilst completing your application form, you will be able to indicate if you wish to be considered under the disability confident scheme. If you would prefer to discuss this directly with us, please contact the GBS Recruitment team on recruitment@sellafieldcloud.co.uk

• Please be aware that this role is subject to achieving security clearance. This role requires higher level of National Security Vetting where applicants must typically have 5 or 10 years of continuous residency in the UK. Factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the level of clearance you’re able to achieve.