2 of 2 HMG Security Policy Framework Jobs in the Thames Valley

technology domains, including Operational Technology (OT), Information Technology (IT), Technical Architecture, and Supply Chain. This role focuses on evaluating the effectiveness of cyber security controls, identifying areas of risk management, and ensuring that appropriate mitigation strategies are in place. Working under the direction of the Cyber Assurance Principal Advisor … certifications (e.g., ISO 27001 Auditor, CISA, GIAC)Desirable: Experience in the nuclear or CNI sector; familiarity with ONR SyAPs, NISR 2003, and HMG SPF; experience with assurance tooling or evidence management platformsWhat's on offerAnnual bonus of up to 15%, made up of company and personal performanceAttractive defined contribution ...

within a regulated or critical infrastructure environment.Understanding of cyber risk frameworks (e.g., ISO 27005, NIST, FAIR) and the NCSC CAF.Degree or equivalent in cyber security, risk management, or a related field.Relevant certifications (e.g., CRISC, CISSP, ISO 27005 Risk Manager).DesirableExperience in the nuclear or CNI sector.Familiarity with ONR SyAPs … NISR 2003, and HMG SPF.Experience with risk quantification or risk tooling platforms.Context and ChallengesThis role operates within a complex, highly regulated, and security-critical environment where cyber resilience is essential to operational integrity and regulatory compliance. The postholder must navigate overlapping and evolving regulatory frameworks while balancing robust ...