A Health and Safety Lead acts as the functional authority within Sellafield Ltd for specific Health & Safety (H&S) discipline (e.g. Conventional Health & Safety, Radiological Protection, Occupational Hygiene, Chemical Safety / COMAH, Fire Protection, Management of Contractors, Governance and Oversight, Regulatory Integration). They ensure that all matters related to the assigned discipline are effectively managed, with appropriate consideration of business risk, cost, and schedule impact. The job holders are responsible for shaping company-wide policy, defining standards, setting improvement objectives, and providing assurance to the SHEQ Director, SHEQ Lead Team and H&S Duty Holders on company safety performance.
Act as the senior authority for Conventional Safety and source of corporate knowledge, in order to provide specialist advice, guidance and services to the business. Shape company H&S strategy and policy, and provide the safety ‘rules and tools’ required to support the safe execution of the Sellafield Plan. Ensure that all relevant legislative requirements, standards and industry good practice are interpreted and incorporated within the Sellafield Ltd Management System. Define company improvement objectives and targets, and establish Key Performance Indicators to measure and monitor performance against those targets. Act as an Intelligent Customer for H&S; owning and overseeing outsourced work, ensuring specifications are clear, outputs meet regulatory and safety standards, and Sellafield Ltd retains accountability for safety-critical decisions. Ensure that effective governance arrangements are implemented across the enterprise and assure the business on performance against legislative and company standards and targets. Ensure accurate and timely reporting of significant H&S issues and ensure that effective corrective action plans and improvement programmes are developed and implemented to address gaps in regulatory compliance. Promote a culture of organisational learning to continually improve performance. Identify and provide ownership and active management of enterprise level H&S risks. Act as a conscience of the organisation, intervening as appropriate to challenge activities which threaten H&S standards and performance. Own and continuously enhance the company’s Health & Safety training programmes, ensuring alignment with regulatory and operational requirements. Define company nuclear baseline and SQEP requirements for key H&S roles....
To provide advanced cyber security monitoring, analysis, and incident response within the organisation’s security operations framework. The Tier 3 analysts are responsible for investigating escalated alerts, performing in-depth threat analysis, and supporting proactive measures, such as threat hunting to detect and mitigate cyber risks. This role ensures robust detection and response capabilities, continuous improvement of security processes to maintain organisational resilience and compliance.
Monitoring SIEM tools to assure high a level of security operations delivery function. Serve as an escalation point for more junior analysts, providing expert guidance and technical leadership. Lead investigations into high-severity or complex security incidents, coordinating containment and eradication efforts. Working with the engineering team, develop and optimise advanced detection rules, correlation logic, and automation workflows within SIEM and SOAR platforms. Inform proactive threat hunting and identify emerging attack patterns using frameworks such as MITRE ATT&CK. Review and enhance incident response runbooks; ensure they remain fit for purpose and aligned with best practices. Produce detailed post-incident reports and lessons learned, drive improvements across processes and tooling. Collaborate with technical teams to ensure new and changed services are integrated into monitoring and compliance frameworks. Mentor and coach more junior analysts, supporting their technical development and career progression. Deliver knowledge-sharing sessions and contribute to team training plans. Recommend and implement continual service improvements to strengthen cyber resilience. Ensure compliance with organisational security policies and regulatory requirements. Act as a subject matter expert for cyber security monitoring and incident response during audits and stakeholder reviews. Authority to escalate incidents and recommend containment actions. Elevated access to monitoring tools, SIEM, and forensic platforms for analysis. Some on call working may be required. Provides technical guidance and mentoring to junior analysts, influencing Security Operations Centre (SOC) operational strategy. Manage and develop a shift team of Tier...
The Hardware Asset Management (HAM) Analyst supports the HAM Manager(s). They are responsible for the day-to-day execution of the Hardware Asset Management process and are responsible for the effectiveness and efficiency of the process, governing the standards that ICT and Suppliers must adhere to. They ensure that the SL Configuration Management Database (CMDB) is healthy and presents a true representation of the relevant Configuration Items (CI’s) for Sellafield Ltd services, enabling this to be used to deliver business value. This includes governance of the supply chain, to identify, control, record, report, audit, and verify hardware service assets through their lifecycle, including basic asset relationships. Reporting into the SACM Lead, this role supports the HAM Manager(s) to enable them to lead Hardware Asset Management within SACM. Sellafield Ltd Information Services Organisation (ISO) own all ITSM processes. This role will support the day-to-day execution of the Hardware Asset Management process by effectively supporting the HAM Manager role. The scope of asset management in SL will be those assets agreed within the SL SACM CMDB Data Model. Records for such items will be created, managed and maintained within the SL SI CMDB under Individual contracts, with Governance activities being performed by the HAM Manager(s). This role has a key supporting role in delivering this. The Hardware Asset Management function is focused on maturing and optimising asset management processes, governance and data management practices across Sellafield Ltd ICT supply chain. This role plays a key part in driving continual service improvement, enhancing asset data quality, supporting audit and compliance activities, and ensuring suppliers operate in accordance with agreed HAM processes and standards.
Support the HAM Manager(s) in the delivery of HAM requirements across all IT Supplier contracts. Assure delivery of Supplier adherence to all policies and processes relating to HAM. Review and analyse HAM SLA/KPI reporting from the supply chain. Fully apprise the HAM Manager(s) when shortfalls in SLA/KPI achievement are identified. Support the health of the CMDB within the SL ITSM Toolset, including basic relationships between CI’s. Utilise the CMDB Data Model and make recommendations where necessary. Identify opportunities for improvements to the HAM process, working with Continuous Service Improvement. Produce HAM reporting and insights. Maintain volumetrics. Monitor and update the ITSM queue and tickets for HAM. Support the SACM Lead in setting SACM strategy, along with the HAM Manager(s). Support the implementation of new HAM techniques and methods. Support and maintain HAM information management systems, including data repositories and reporting dashboards. Champion the importance of SACM and be an advocate for SACM. Maintain a working knowledge of the latest SACM standards within the industry. To advise both ICT colleagues and Suppliers on HAM strategy and priorities. Act as Deputy on behalf of the HAM Manager(s) as required. Maintain volumetrics. Update HAM plans and reports. Demonstrable experience delivering Hardware Asset Management (HAM) and IT Asset Management (ITAM) services within a large, complex enterprise environment, including asset lifecycle management, data governance, reconciliation, and compliance activities. Knowledge of Service Management Best Practice....
The Cyber Assurance Advisor I role is responsible for supporting the delivery of second-line cyber assurance across key technology domains, including Operational Technology (OT), Information Technology (IT), Technical Architecture, and Supply Chain. This role focuses on evaluating the effectiveness of cyber security controls, identifying areas of risk management, and ensuring that appropriate mitigation strategies are in place. Working under the direction of the Cyber Assurance Principal Advisor and in collaboration with the Cyber Assurance Team Lead, the postholders contribute to the organisation’s overall cyber resilience by conducting assurance activities, supporting compliance with internal and external requirements, and ensuring that findings are clearly communicated and addressed. Their work helps maintain a strong security posture and supports informed decision-making across the business.
Support the planning, coordination, and delivery of cyber assurance activities across IT, OT, technical architecture, and supply chain domains. Conduct cyber control testing, evidence reviews, and contribute to structured assurance assessments to evaluate the effectiveness of security measures. Assist in the development and presentation of assurance reports, dashboards, and metrics for internal stakeholders, enabling informed risk-based decisions. Maintain and update assurance documentation, including assessment records, evidence logs, and action tracking registers. Identify control weaknesses and/or gaps that create or increase risks. Collaborate with ICT, engineering, and supply chain teams to gather evidence, validate control implementation, and support timely remediation of identified issues. Contribute to regulatory and audit readiness by supporting evidence collation, documentation reviews, and preparation activities. Monitor and maintain awareness of emerging cyber threats, regulatory developments, and assurance best practices to inform assurance planning and execution. Support continuous improvement of assurance methodologies, tools, and processes to enhance the effectiveness and efficiency of cyber assurance activities. Participate in knowledge sharing and awareness initiatives to promote a strong cyber risk culture across the organisation. The Cyber Assurance Advisor I role operates within a complex and evolving digital environment where cyber threats are increasingly sophisticated and regulatory expectations continue to grow. This role sits within the second line of defence, providing independent oversight and assurance of cyber security controls across diverse domains including IT, OT, technical architecture, and supply chain. The postholders are expected to work collaboratively across business units, often engaging...
To lead the Protective Monitoring team in delivering proactive and reactive monitoring of security events across the organisation’s technical infrastructure. The role ensures timely detection, analysis, and escalation of potential cyber threats, supporting the organisation’s resilience against security incidents. The Team Lead will manage operational processes, develop team capability, and ensure compliance with regulatory and organisational security standards.
Lead and manage the Protective Monitoring team, ensuring effective allocation of resources and prioritisation of tasks. Oversee the monitoring, detection, and analysis of security events using SIEM and related technologies. Ensure timely escalation and coordination of incident response activities in line with organisational policies. Maintain and improve protective monitoring processes, ensuring alignment with industry best practices and compliance requirements. Develop and maintain operational dashboards and reporting for senior stakeholders. Own KPIs and SLAs for the monitoring capability (MTTD, MTTR, false positive rate, ingestion latency) and provide executive reporting. Drive continuous improvement initiatives, including automation and optimisation of monitoring workflows. Provide leadership, coaching, and development opportunities for team members. Collaborate with other Cyber Security teams and stakeholders to enhance threat detection and response capabilities. Ensure adherence to data protection, confidentiality, and security standards across all monitoring activities. Decision-Making: Authority to prioritise monitoring activities and escalate incidents as per policy. People Management: Direct line management of Protective Monitoring Analysts. Systems Access: Elevated access to monitoring tools and platforms for operational oversight. Part of the emergency response arrangements. Some on call working may be required. Ability to achieve SC and NPPV Clearance. Degree or equivalent experience in a relevant discipline (e.g., Cyber Security, Computer Science, Digital Forensics). Proven experience in cyber security operations, specifically in protective monitoring or SOC environments. Demonstrated experience of strong knowledge in information security principles (security principles applied to architecture,...
The Chief Medical Officer (CMO) establishes, directs, oversees and leads Occupational Health (OH) standards across the business, acting as the senior authority on all health matters, providing strategic medical leadership across the Enterprise. To ensure that all matters relating to health within the business are addressed appropriately, taking due account of business risk, business impact, cost and schedule implications, and ensuring delivery of defined OH services that support a safe, healthy and legally compliant workforce. The CMO provides strategic and professional oversight of Occupational Health services, including but not limited to: Management referrals. Health surveillance. Statutory and task-related medicals. Substance misuse sampling and reporting. In addition, the CMO also carries out the Medical Officer (MO) role, undertaking the duties as described in the MO Job Profile. Our Occupational Health department provides a professional and technical support service to the Company and forms a key part of SL site’s first aid provision and medical emergency response to radiological and non-radiological emergencies. The Occupational Health function operates within a complex, highly regulated environment. In addition to preventative and advisory health services, the department forms a critical role in supporting resilience and medical preparedness. The Chief Medical Officer plays a key leadership role in ensuring medical readiness, resilience and professional standards within this operational context.
Represent the interests of SL regarding health issues across the population of external customers, partners, stakeholders and special interest groups, including: - Chair of the Compensation Scheme for Radiation-Linked Diseases. - Representing the company and workers on the National Registry for Radiation Workers, working group, alongside UK Health Security Agency (UKHSA). - Liaise with the Nuclear Decommissioning Authority (NDA), Trade Unions and Office of Nuclear Regulation (ONR). Ensure that appropriate and adequate services, skills, capabilities and resources are distributed within the OH department in order to maintain effective service delivery. Provide direction on work, goals, targets and priorities within the OH department. Delegate appropriate level of authority to OH team members, leading a team of Occupational physicians and nursing staff, including a 24/7 shift nursing team. Ensure the provision and maintenance of the OH department including ensuring adequate succession and development plans are in place to maintain OH capability and delivery. Oversee assurance programme for audit within the business and for external organisations such as Lloyd’s Register Quality Assurance (LRQA) and the Faculty of Occupational Medicine for SEQOHS accreditation. Lead on business continuity and recovery for Occupational Health and all things medical within SL. Liaise with Value Stream Leads, Group Business Services (GBS), Human Resources (HR) and Security Vetting to ensure operational alignment within statutory law and ethical guidance. Ensure that all relevant health legislative requirements and standards are incorporated within the SL Management System and that processes are effective and...
The Cyber Process Manager is responsible for designing, implementing, and continuously improving cyber security processes across Sellafield Ltd to ensure they are efficient, consistent, and aligned with regulatory, operational, and business requirements. The role plays a critical part in embedding structured, repeatable, and auditable practices that underpin the organisation’s compliance, and assurance activities. Operating within a highly regulated and technically complex environment, the postholder works closely with compliance, assurance, and ICT delivery teams to ensure that cyber processes are integrated into day-to-day operations and support strategic objectives. The role also contributes to audit readiness, regulatory engagement, and the development of a mature, process-driven cyber security function that can adapt to evolving threats and expectations.
Lead the design, documentation, and implementation of cyber security processes and workflows. Ensure cyber processes align with CAF principles, regulatory requirements (e.g., ONR SyAPs, NISR 2003), and internal governance frameworks. Collaborate with cyber risk, compliance, and assurance teams to ensure process integration and consistency. Monitor process performance using KPIs and metrics; identify and implement improvements. Support internal and external audits by ensuring process documentation and evidence are maintained and accessible. Act as a subject matter expert on cyber process management, providing guidance to ICT and business stakeholders. Drive process automation and standardisation to improve efficiency and reduce operational risk. Maintain a central repository of cyber security process documentation and ensure version control and accessibility. Support regulatory engagement with the ONR by ensuring cyber security processes are transparent, well-documented, and demonstrably aligned with regulatory expectations. Provide evidence and process insights during inspections, audits, and formal reviews. Support the Head of GRCA and Cyber Risk Team Lead in embedding a culture of process excellence and continuous improvement. Budget Responsibility: Contributes to process improvement initiatives within the GRCA budget. Matrixed Line Management responsibility. Decision-Making Authority: Authority to define and approve cyber process documentation and improvement plans. Strong experience in process design and improvement, ideally within a cyber security or ICT environment. Familiarity with process frameworks such as ITIL, COBIT, or ISO 27001. Understanding of cyber security principles and regulatory requirements (e.g., CAF, NISR, ONR SyAPs). Experience...
Provide expert offensive cyber capabilities by leading and supporting the planning, execution and analysis of advanced penetration testing, red/purple team, vulnerability assessment and adversary simulation engagements. The objective is to uncover and proactively mitigate exploitable security weaknesses across IT, OT, Cloud and application environments, thereby supporting a resilient and continuously improving defensive posture for the organisation. The profile spans junior and senior responsibilities from conducting technical tests to mentoring junior analysts and contributing to the strategic development of the offensive security function. These roles operate at the front line of proactive cyber defence; this role challenges entrenched security assumptions and identifies risks before adversaries do. It involves rapidly adapting to technological and threat landscape changes, staying current with emerging threats and tools, and meeting shifting regulatory and organisational demands. Analysts must collaborate effectively, operate ethically, and contribute to continual improvement, knowledge transfer, and maturity of the organisation's offensive security capability.
Conduct penetration tests, vulnerability scans, and red/purple team engagements across infrastructure, applications, cloud and OT environments. Document findings, analyse exploitation risk, and contribute to technical and non-technical reporting. Maintain and update offensive toolsets according to best practice Support mitigation efforts and collaborate with other teams. Assist in adversary simulation scenarios to improve detection and response maturity. Maintain up to date knowledge of threats and offensive security techniques. Participate in scoping and remediation reviews. Maintain professional development and certifications. Operate with high stands of legality and ethics. Hands-on experience with offensive security tools and techniques (e.g., penetration testing frameworks, red/purple team tooling). Understanding of common security vulnerabilities, exploitation methods, and security controls. Good written and verbal communication for reporting and stakeholder engagement. CREST, CHECK, OSCP/OSCE or equivalent certification. Experience in nuclear, defence, or critical infrastructure environments. Experience integrating red team outcomes into blue team/detection engineering pipelines. Open VN Number of Vacancies: 2 Contact/s: Andrew Shutak The interviews for this vacancy are to be confirmed. ASW’s may have the right to apply for internal Sellafield Ltd vacancies. Please note if you are an Agency Supplied Worker you are required to attach evidence of all qualifications obtained to support your application. We require a minimum of A*-C (9-4) GCSE in English Language, Maths & Science/IT or equivalent / higher qualification. If you choose to apply for this role and your application is shortlisted by the...
Responsible for integrating, coordinating, and enabling all SHEQ support activities required by the SHEQ Director and the SHEQ Lead Team. This includes coordination of SHEQ strategy, planning, governance, assurance, reporting, engagement, communication, improvement activity, and other requirements as defined by the SHEQ Director. The role acts as the primary coordinating interface for the SHEQ Director and Lead Team, ensuring clarity, alignment and disciplined execution across all SHEQ functions. Is the core integrator that enables the SHEQ Lead Team to operate as a cohesive, high‑performing leadership body. They ensure that key routine and strategic deliverables to the SHEQ Director, Executive and Board are planned, coordinated and delivered to the required quality, cadence and standard. Through effective integration, prioritisation and orchestration, the role enables the day‑to‑day and year‑on‑year activities of the SHEQ Lead Team to be visible, aligned and delivered at pace - strengthening organisational performance, supporting informed executive decision‑making, and ensuring that SHEQ expectations are consistently reinforced across the SHEQ organisation.
Coordinate and integrate delivery of the SHEQ strategy and ambition, ensuring clear translation of strategic objectives into actionable plans with the SHEQ Lead Team and monitoring progress against agreed priorities. Integrate SHEQ governance and assurance into coherent insight and action, ensuring that oversight, challenge, findings and risks are synthesised into clear messages, prioritised interventions and well‑governed decision‑making for the SHEQ Director and Lead Team. Own and manage SHEQ reporting, ensuring high‑quality, timely and insightful reporting to the SHEQ Director, Executive, Board and internal governance forums, with a focus on performance, risk and delivery confidence. Coordinate and drive SHEQ improvement programmes, ensuring prioritised, aligned and measurable improvements that enhance performance, culture and capability across all SHEQ disciplines. Examples include Workstream Lead for Target Operating Model, MAVE, NISCI, etc. Lead SHEQ communications and engagement, ensuring clear, consistent and effective messaging across the SHEQ organisation and enabling the SHEQ Lead Team to operate as a unified leadership body. Manage the SHEQ portfolio, overseeing financial planning, budget tracking, resource management, headcount oversight and routine SHEQ business delivery to ensure efficient and effective use of SHEQ resources. Coordinate day‑to‑day and long‑term delivery across the SHEQ Lead Team, ensuring SHEQ work programmes, commitments and routine deliverables are aligned, integrated and delivered to the required pace, quality and standard. Enable effective SHEQ Director engagement, acting as the primary coordinating interface to ensure the Director receives the right information, insight, support and alignment across all SHEQ functions. Develop, enable...
All applicants will be required to meet the following criteria: Fully Accomplished/Competent. At least 1 year out of Apprenticeship/1 year with SL. My Contribution performance to be a minimum of ‘Meet Expectations’. Achieved Nomination. Completed GET Training. SQEP Role/Mentor Guide- SP30001/MG0403. If the application has met the pre-requisites – applicants will be invited to undertake an informal discussion and sent a copy of the Guidance Document. If the application has not met the pre-requisites – applicants will be notified why they have not been selected for the next steps and details of these applicants will be shared with Unite. NOTE: The GET Training is the company Site Wide Qualifications that all employees must complete. This includes: Working Safely (S02241). Fire Safety eLearning (EL0026). Environmental Waste Management (EL0044). Nuclear Safety Culture (EL0106). Environmental Awareness at Sellafield (EL0160). Cyber Security and Information Assurance (EL0163). Data Protection (EL0192) Equality and Diversity (EL0198).
Open VN Number of Vacancies: 1 Contact/s: Debbie Eilbeck Please see link to the competency framework for further information: https://slportal.ssa-intra.net/pub/SC001/00027/Competency%20Framework/Forms/AllItems.aspx Sellafield Ltd are recognised as a Disability Confident Employer (Level 3). Disability Confident employers offer an interview to disabled applicants that meet the minimum criteria for a vacancy. Sellafield Ltd define the minimum criteria as the ‘essential skills’ which are listed on the vacancy notice. Whilst completing your application form, you will be able to indicate if you wish to be considered under the disability confident scheme. If you would prefer to discuss this directly with us, please contact the GBS Recruitment team on recruitment@sellafieldcloud.co.uk Please ensure that you save a copy of this advert for future reference if you make an application for this role. The closing date for this vacancy is Sunday 19th July 2026.
Fill in the form that pops out with your email address and desired contact frequency then click the 'Subscribe' button on the form.
You will have the choice to opt out of the alert in the email confirmation.
