Cyber Process Manager

We are seeking a Cyber Process Manager to design, implement, and continuously improve cyber security processes across a large, highly regulated Critical National Infrastructure organisation. This role ensures processes are efficient, consistent, and aligned with regulatory, operational, and business requirements, playing a critical part in embedding structured, repeatable, and auditable practices that underpin compliance and assurance activities. Operating within a technically complex environment, the postholder works closely with compliance, assurance, and ICT delivery teams to integrate cyber processes into day-to-day operations and support strategic objectives.

What you'll do:

• Lead the design, documentation, and implementation of cyber security processes and workflows.
• Ensure cyber processes align with CAF principles, regulatory requirements (e.g., ONR SyAPs, NISR 2003), and internal governance frameworks.
• Collaborate with cyber risk, compliance, and assurance teams to ensure process integration and consistency.
• Monitor process performance using KPIs and metrics; identify and implement improvements.
• Support internal and external audits by maintaining process documentation and evidence.
• Act as a subject matter expert on cyber process management, providing guidance to ICT and business stakeholders.
• Drive process automation and standardisation to improve efficiency and reduce operational risk.
• Maintain a central repository of cyber security process documentation with version control.
• Support regulatory engagement with the ONR, providing process insights during inspections, audits, and formal reviews.
• Support the Head of GRCA and Cyber Risk Team Lead in embedding a culture of process excellence and continuous improvement.

What we're looking for:

• Strong experience in process design and improvement, ideally within a cyber security or ICT environment.
• Familiarity with process frameworks such as ITIL, COBIT, or ISO 27001.
• Understanding of cyber security principles and regulatory requirements (e.g., CAF, NISR, ONR SyAPs).
• Experience with process mapping tools and techniques (e.g., BPMN, Visio).
• Strong analytical, documentation, and stakeholder engagement skills.
• Degree or equivalent in cyber security, business process management, or a related field.
• Relevant certifications (e.g., ITIL, Lean Six Sigma, ISO 27001 Implementer).
• Desirable: Experience in the nuclear or CNI sector; familiarity with CAF maturity assessments and process audit readiness; experience with process automation tools (e.g., ServiceNow, Power Automate); knowledge of quality management systems and continuous improvement methodologies.

What's on offer:

• Annual bonus of up to 15%, made up of company and personal performance.
• Attractive defined contribution pension scheme company matches up to 13.5% for a 7% employee contribution.
• 30 days annual leave + bank holidays, plus ability to purchase an extra 2.5 days per year.
• Ability to carry over 10 days annual leave each financial year.
• Paid Sick Leave.