Ofgem is Great Britain’s independent energy regulator - a critical role that puts us at the forefront of cyber security, ensuring public data is safe and secure and that we set the standard for the energy industry. We’re looking for a Principal Security Specialist (IT/OT) to join and lead the design, assessment, and implementation of innovative security solutions and associated guidance aimed at protecting critical systems. This work aligns with our core mission: to deliver a fair, sustainable, and secure energy future.
This a permanent role within our Cyber Guidance & Monitoring (G&M) team, which sits within Ofgem’s Cyber and Emerging Technologies Directorate. The G&M team focus on ensuring resilience is built into systems run by energy operators who control the UK’s energy infrastructure. We do this as part of our role as Joint Competent Authority (“CA”) for the Network and Information Systems Regulations 2018 (“NIS Regulations”). We provide 1-2-1 and sector-wide advice and guidance to operators throughout their security journeys, seeking to build greater collective industry resilience. We are very fortunate to be able to help influence and shape the security and resilience of a whole sector (specifically, the Downstream Gas and Electricity sector).
Job description
As an expert in the field, you’ll lead high-profile security improvement projects, engaging with a wide range of internal and external stakeholders to shape security posture, implementing best practice in line with National Cyber Security Centre (NCSC) guidance. This is a chance to be at the forefront of innovation and meaningful change, championing secure by design principles and influencing digital strategies that benefit millions. This role provides a rare opportunity to combine technical expertise with strategic leadership – and it’s an exciting time to join us!
At Ofgem, we offer more than just a job – we provide a supportive and flexible working environment designed to help you thrive. With hybrid working arrangements, newly refurbished offices in central London, Glasgow, or Cardiff, and a generous rewards package that includes excellent professional learning and development opportunities (including access to potential higher education funding – subject to review), you’ll find everything you need to excel both professionally and personally.
For further details on the role and on our hybrid working arrangement, please read the candidate pack and other documents below.
Person specification
Please ensure you demonstrate clearly, within your supporting statement, how you meet each of the essential criteria. In the event of receiving a large number of applications, an initial sift may take place on just the lead criteria indicated in the essential criteria.
Essential Criteria:
- Demonstrable experience in a leading role managing technical security risk and delivering security improvement plans within complex organisational, operational, or critical infrastructure environments. (LEAD)
- Proven experience providing security advice, guidance, challenge, and assurance to stakeholders responsible for critical systems, business services, or infrastructure.
- Experience applying security frameworks, risk management methodologies, and technical standards (e.g. NCSC CAF, NIST CSF, ISO 27001, CIS Controls, IEC/ISA 62443) to assess and improve organisational resilience.
- Strong stakeholder management and communication skills, including the ability to influence decision-making and communicate complex security risks to both technical and non-technical audiences.
Behaviours
We’ll assess you against these behaviours during the selection process:
- Seeing the Big Picture
- Changing and Improving
- Making Effective Decisions
- Communicating and Influencing
Benefits
Alongside your salary of £63,443, OFGEM contributes £18,379 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).
Ofgem can offer you a comprehensive and competitive benefits package which includes; 30 days annual leave after 2 years; Excellent training and development opportunities; The opportunity to join the generous Civil Service pension which also includes a valuable range of benefits; hybrid working (currently 1 day a week in the office but this is kept under review), flexible working hours and family friendly policies. Plus lots of other benefits including clean and bright offices based centrally, engaged networks and teams and an opportunity to contribute to our ambitious and important targets of establishing a Net Zero energy system by 2050. This exciting blend of professional challenge and personal reward identifies career opportunities at Ofgem as something to get excited about.
#J-18808-Ljbffr
Principal Security Specialist in Cardiff employer: Ofgem
Ofgem is an exceptional employer that prioritises a collaborative and inclusive work culture, empowering employees to tackle complex regulatory challenges in the energy sector. With a strong focus on professional development and support, staff are encouraged to grow their skills while contributing to impactful government energy programmes. Located in the UK, Ofgem offers a unique opportunity to be part of a mission-driven organisation dedicated to fairness and effectiveness in energy regulation.
