Security Assurance Analyst

Welcome to the future of nuclear energy, where Westinghouse Electric Company is leading the field with expertise and innovation to shape the power of tomorrow. At Westinghouse, innovation is in our DNA. We are creative. We think differently. We reimagine the possible across the nuclear industry every day.

As a Supply Chain Security Analyst/Advisor, you will help assess and maintain the security posture of SFL's supply chain. You will work across departments to ensure third-party suppliers meet required security, integrity, and regulatory standards. You will support compliance with regulatory and industry security frameworks while helping protect the supply chain from security risks. You may also occasionally assist Cyber Security Team managers in areas such as governance, risk, policies, awareness, and technical security, depending on your experience. You will report to the Cyber Security Supplier Assurance Manager and be based at Springfields, Preston. Hybrid working available.

Responsibilities

• Plan and conduct security assurance reviews and assessments with SFL suppliers against a risk-based plan, to evaluate their compliance with contractual and regulatory security requirements.
• Contribute to the development and continuous improvement of SFL's supply chain security arrangements, ensuring internal policies and regulatory expectations.
• Support the identification, assessment and mitigation of supplier security risks through the contract lifecycle.
• Maintain comprehensive records of supply chain security assurance activities, including for internal and regulatory reporting.
• Support supply chain security ONR interventions, internal audits, and corporate assurance reviews.
• Work with all relevant departments within SFL to embed security assurance processes within sourcing and contracting activities.
• Provide guidance to company partners on supplier security assurance, standards and procedures.
• Build relationships with suppliers to foster transparency, accountability, and to support remediation of security non-conformances.
• Help coordinate any supply chain security breaches and subsequent incident investigations.
• Help integrate security assurance processes into digital procurement and vendor management systems, and other evolving projects.

Qualifications

• Experience in supply chain security within the civil nuclear sector or another regulated environment.
• Background in supply chain management, risk management, assurance, or related disciplines.
• Understanding of regulatory and industry standards for supply chain security (e.g., ONR SyAPs, HMG Security Standard, ISO 27001, NCSC CAF, NIS, NIST).
• Knowledge of vendor risk management tools and digital assurance platforms.
• A relevant professional assurance qualification/certification such as ISO 27001, CISA or similar.
• An information security qualification/certification, such as CISM, CISSP or similar.
• Member of a recognized security body, such as The Security Institute, or similar.
• SC (Security Check) or ability to obtain.

Why Westinghouse?

We know that to put forth your best effort, you need us to challenge you, and you need to enjoy what you do in an environment that we support and respect. We aim to maintain this balance by offering our employees the amenities, benefits and training they need to reach personal and professional goals.

Attractive compensation and great benefits:

• Peer-to-peer recognition program.
• Life insurance.
• Pension plan.
• Employee Assistance Program: confidential counseling and resources for employees, eligible dependents, and household members.
• Learning and development opportunities.

We encourage our employees to participate in community service events and other team-building activities to strengthen their bonds and inspire each other.

Westinghouse is an Equal Opportunity Employer including Veterans and Individuals with Disabilities. Employment opportunities may require access to information which is subject to the export control regulations of the United States. Hiring decisions for such positions are required by law to be made in compliance with these regulations. Applicants for employment opportunities in other countries must be able to meet the comparable export control requirements of that country and of the United States.