Head of Business Continuity & Cyber Resilience

You will be responsible for:

• Champion business continuity across government security and wider government.
• Drive continuous improvement by sharing knowledge, best practices, and lessons learned.
• Lead a team of business continuity and cyber resilience specialists to deliver the requirements of CAF, DSHC, ISO22301 and 27031 standards
• Lead business continuity and major/minor cyber exercise programmes by engaging stakeholders.
• Promote and ensure delivery of training and awareness campaigns to ensure the successful embedding of continuity practices.
• Lead on the delivery of incident management policies, investigation procedures, and processes.
• Lead the analysis of the source, nature and impact of breaches to support threat intelligence
• Monitor security processes, ensuring they are effective and meet current business needs
• Contributing to incident management policies, and investigation procedures and processes

This is an opportunity to play a significant role in Ofgem’s journey, as part of a newly formed and high-performing team that is shaping a critical government organisation at a time when its work has never been more important., At Ofgem, we expect our staff to carry out their roles with honesty, fairness and openness. They should follow the Civil Service code and be free from any influence or bias. We are committed to making sure interests are recognised, declared and managed appropriately so that we can fulfil our duties as an energy regulator. Our Conflicts of Interest policy outlines the types of interests Ofgem staff must declare before onboarding, and the rules they must follow throughout employment so that we can clearly demonstrate that our decisions are not influenced by private interests. Feedback will only be provided if you attend an interview or assessment.

Security

Successful candidates must undergo a criminal record check. Successful candidates must meet the security requirements before they can be appointed. The level of security needed is developed vetting .

See our vetting charter . People working with government assets must complete baseline personnel security standard (opens in new window) checks., * UK nationals

• nationals of the Republic of Ireland
• nationals of Commonwealth countries who have the right to work in the UK
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
• Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

• Experience delivering business continuity, resilience, or cyber incident management. (Lead Criteria)
• Experience in influencing senior stakeholders and leading organisational planning. (Lead Criteria)
• Experience in Cyber Security and Risk Management (resilience focus)
• Experience exercising at bronze, silver and gold commands
• CISM and AMBCI/MBCI/DBCI.

Desirable Criteria

• Experience working in regulated or government environments.
• Experience delivering organisational training and awareness programmes., * Changing and Improving
• Communicating and Influencing
• Leadership

Technical skills

We’ll assess you against these technical skills during the selection process:

• You will be asked to conduct a presentation during your interview. Details of the presentation will be included in the invitation to interview., This vacancy is using Success Profiles , and will assess your Behaviours, Experience and Technical skills.

Pulled from the full job description

• Annual leave
• Company pension
• Flexible schedule, Alongside your salary of £63,443, OFGEM contributes £18,379 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides . Ofgem can offer you a comprehensive and competitive benefits package which includes; 30 days annual leave after 2 years; Excellent training and development opportunities; The opportunity to join the generous Civil Service pension which also includes a valuable range of benefits; hybrid working (currently 1 day a week in the office but this is kept under review), flexible working hours and family friendly policies. Plus lots of other benefits including clean and bright offices based centrally, engaged networks and teams and an opportunity to contribute to our ambitious and important targets of establishing a Net Zero energy system by 2050. This exciting blend of professional challenge and personal reward identifies career opportunities at Ofgem as something to get excited about.

Across government, digital and technology transformation is no longer simply an enabling function; it is central to how public bodies deliver better services, protect resilience, support policy outcomes and respond to the growing expectations of citizens, businesses and colleagues. Ofgem has a vital role in the UK’s energy system, protecting consumers and helping to enable a more secure, fair and sustainable energy future. As the organisation continues to evolve, our newly designed Digital, Data and Security Services (DDSS) team will be critical to how Ofgem modernises its services, strengthens its platforms and supports wider government priorities.

Ofgem is on an exciting transformational journey. Within DDSS, we are strengthening the foundations of our both our entire function and all elements of our DDSS estate, building greater internal capability and creating the platforms, services and governance needed to support a modern regulator. In short, this is an opportunity to join Ofgem at a pivotal moment and help shape the next stage of its digital, data, security, and technology maturity.

This is a senior leadership position responsible for leading Ofgem’s Business Continuity and Cyber Resilience function, ensuring the organisation is fully prepared to prevent, withstand and recover from cyber incidents, operational disruption and wider crises.

You will act as the organisation’s SME for cyber crisis management and major incidents, leading response coordination, delivering resilience exercises, and ensuring lessons learned are embedded into continuous improvement.