Cyber Assurance Advisor

We are seeking a Cyber Assurance Advisor to support the delivery of second-line cyber assurance across key technology domains, including Operational Technology (OT), Information Technology (IT), Technical Architecture, and Supply Chain. This role focuses on evaluating the effectiveness of cyber security controls, identifying areas of risk management, and ensuring that appropriate mitigation strategies are in place. Working under the direction of the Cyber Assurance Principal Advisor, you will conduct assurance activities, support compliance with internal and external requirements, and ensure findings are clearly communicated and addressed. Based in the nuclear sector.

What you'll do:

• Support the planning, coordination, and delivery of cyber assurance activities across IT, OT, technical architecture, and supply chain domains.
• Conduct cyber control testing, evidence reviews, and contribute to structured assurance assessments to evaluate security measure effectiveness.
• Assist in the development and presentation of assurance reports, dashboards, and metrics for internal stakeholders.
• Maintain and update assurance documentation, including assessment records, evidence logs, and action tracking registers.
• Identify control weaknesses and/or gaps that create or increase risks.
• Collaborate with ICT, engineering, and supply chain teams to gather evidence, validate control implementation, and support remediation of identified issues.
• Contribute to regulatory and audit readiness by supporting evidence collation, documentation reviews, and preparation activities.
• Monitor and maintain awareness of emerging cyber threats, regulatory developments, and assurance best practices.
• Support continuous improvement of assurance methodologies, tools, and processes.
• Participate in knowledge sharing and awareness initiatives to promote a strong cyber risk culture.

What we're looking for:

• Experience in cyber security, audit, risk management, or assurance within a regulated or technical environment.
• Understanding of cyber security frameworks (e.g., NCSC CAF, ISO 27001, NIST CSF, NIST 800-53).
• Strong attention to detail and ability to follow structured assurance processes.
• Good communication and documentation skills.
• Degree or equivalent in cyber security, engineering, or a related field.
• Working toward or holding relevant certifications (e.g., ISO 27001 Auditor, CISA, GIAC).
• Desirable: Experience in the nuclear or CNI sector; familiarity with ONR SyAPs, NISR 2003, and HMG SPF; experience with assurance tooling or evidence management platforms.

What's on offer:

• Annual bonus of up to 15%, made up of company and personal performance.
• Attractive defined contribution pension scheme; company matches up to 13.5% for a 7% employee contribution.
• 30 days annual leave + bank holidays, plus ability to purchase an extra 2.5 days per year.
• Ability to carry over 10 days annual leave each financial year.
• Paid Sick Leave.