Band 3 Cyber Security and Operational Resilience Inspector

ONR is not a Civil Service department, however, we are an arms length body of Department of Work and Pensions.

The Opportunity

As the UK’s independent nuclear regulator, our mission is vital to the nation’s safety and security. We protect society by securing safe operations at nuclear facilities across our nation.

This is an exciting role critical to the decarbonisation of the UK’s economy; our national defence; and the decommissioning of our nuclear legacy. A career with ONR will provide you with opportunity to lead and shape our society’s future use of nuclear technology.

The Role

Effective cyber security is increasingly important as modern technology, and interconnected devices become a fundamental part of everyday life. It’s vital to protect the devices and services we access online and at work from harm.

Our Cyber Security and Operational Resilience specialism is responsible for ensuring the civil nuclear sector protects the sensitive nuclear information it holds and appropriately safeguards the systems essential to deliver key outputs and functions.

This is achieved primarily through:

• Assessment of duty holders’ cyber security arrangements to provide confidence that risks are being adequately managed.
• Undertaking regulatory inspections with duty holders to ensure the effective implementation of technical cyber security controls to protect essential functions and the systems that support them (including information technology, operational technology, and sensitive nuclear information).
• Conducting inspections of facilities across the nuclear supply chain to ensure cyber security risks are effectively managed.
• Contributing to the development of regulatory policy and influencing the development of good practice both nationally and internationally.
• Liaison with other regulators (including those in security and safety disciplines) and various Government security and intelligence agencies, including the co-ordination of the sector’s response to high profile cyber security events and incidents.
• Representing ONR at security events and meetings, such as those organised by the International Atomic Energy Agency, the World Institute for Nuclear Security, European Nuclear Security Regulators’ Association, the UK Cyber Security Council, and those directly by the UK Nuclear industry.

Training to expand and deepen knowledge and experience in specific nuclear, cyber security, operational resilience, information assurance and regulatory topics will be given throughout the successful candidate’s career, however successful applicants will already have demonstrable experience in the field.

As experience of regulating nuclear security increases, inspectors are given the opportunity to progress and achieve promotion., * A suitability statement (maximum of 800 words) highlighting how you meet the “essential skills and experience” required for the role, which will be used at shortlisting in conjunction with your CV.

• Where applicable highlight if you have any experience under ‘desirable skills and experience’ within the application form.

Throughout our selection process, we will make decisions based on evidence you provide. If you are shortlisted, you will be invited to a technical/competency-based interview.

AI Tools & Platforms

During the application process applicants are allowed to utilise AI (artificial intelligence) platforms and tools to support them in writing their CVs, suitability statements, essential skills and experience. Please ensure that all information submitted is truthful and verifiable. This includes avoiding plagiarism and accurately attributing the work of others, including artificial intelligence generated content, as your own. All presented information will be assessed at the Interview Stage.

Important guidance when providing CV’s – please upload text-based CVs with no graphics or pictures to ensure the anonymisation function works correctly.

Please note - if whilst completing your application, you use special characters such as (‘ ; “ - _ * ) within your examples, Hireserve will convert these characters into symbols. We are currently unable to change this.

Whilst these examples will appear on your application, this will not prevent it from being reviewed at the shortlisting stage.

Feedback will only be provided if you attend an interview or assessment.

Security

Successful candidates must undergo a criminal record check. Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check .

See our vetting charter . People working with government assets must complete baseline personnel security standard (opens in new window) checks., * UK nationals

• nationals of the Republic of Ireland
• nationals of Commonwealth countries who have the right to work in the UK
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
• Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

We expect all Cyber Security & Operational Resilience Inspectors to:

• Hold a relevant qualification (for example, an NCSC certified master’s degree (e.g. MSc), or equivalent Level 6 qualification (e.g. CISSP) or higher in a Cyber Security or Information Security related discipline).
• Hold Full Professional Membership (e.g. MCIIS, MBCS) and/or Chartership of an appropriate professional body (e.g. ChCSP, CITP).

Applicants who feel they possess equivalent experience, qualifications and/or professional memberships are invited to apply, however must clearly evidence how their background and skills meet these expectations.

It should be noted that the market-based allowance attracted by this post is linked to ongoing professional development/ retention of essential qualifications detailed above.

Essential skills and Experience

To be effective, the candidate will require a breadth and depth of expertise and skills in technical areas (such as cyber defence, detection, response, resilience and recovery); and a firm understanding of personnel/procedural areas (such as leadership and management, culture, and competence) related to information risk management and cyber security. This is likely to include:

• Extensive understanding of the principles, processes and challenges of information risk management and its practical application in a nuclear or high-hazard environment.
• Knowledge of current cyber threats and technical security vulnerabilities.
• Application of Government protective security procedures and making balanced judgements on adequacy.
• Understanding of the principles expected for operators of essential services/ critical national infrastructure sectors in respect to cyber resilience.
• Proficiency at managing security risks in a regulated environment.
• Leadership in the assessment of cyber security arrangements, including the conduct of audits, assurance activities and/or compliance inspections.
• Delivery of concise, accurate, high quality written reports to tight deadlines.
• Proven effective judgement and decision-making skills, including an understanding of strategic impact, gathering, and analysing relevant information, evaluating options, applying logical reasoning, and making effective and proportionate risk-based recommendations.
• Being open and communicative through the ability to demonstrate highly articulate verbal and written communication skills, including the ability to present complex technical matters to a non-expert audience.
• Demonstrable strong influencing skills and an ability to persuade by working collaboratively and flexibly with all stakeholders, showing appropriate interpersonal sensitivity, self-awareness, and assertiveness.
• Evidence of managing projects through sound planning, prioritisation, and timely delivery of work to very high standards.
• Evidence of effective and professional behaviours throughout delivery of roles.

Pulled from the full job description

• Annual leave

• Company pension, £71,196 - £81,794 Plus, an additional £4,194 London Weighting Allowance (if applicable). This role also attracts an additional £14,490 consolidated cyber market retention allowance. A Civil Service Pension with an employer contribution of 28.97% GBP, We recognise we have a role to play in helping those leaving the Armed Forces and also have a Veterans guaranteed interview scheme. We offer an interview to Veterans who meet the minimum criteria for applicants who opt into the scheme. Please see eligibility criteria below.

• served for at least one year in His Majesty’s Armed Forces (as a Regular or Reserve)
• be in transition from, or ceased to be a member of, His Majesty’s Armed Forces; and
• not already be employed by ONR., Alongside your salary of £71,196, Office for Nuclear Regulation contributes £20,625 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides .

An annual leave allowance of 25 plus 8 days public holiday. There is also an entitlement to 1 privilege day. Your annual leave allowance will increase by 1 day each year up to a maximum of 30 days.

• Learning and development tailored to your role
• An environment with flexible working options
• A culture encouraging inclusion and diversity
• A civil service pension

This post may be undertaken from a base at any one of ONR’s office locations (Bootle, Cheltenham, or London).

This post requires some travel including overnight stays predominantly across the United Kingdom and occasionally abroad.

The successful applicant requires a full driving licence which permits the holder to drive in the UK unless reasonable adjustments can be made under the Equality Act 2010

ONR operates hybrid working (working in the office and / or at home) as part of our flexible working policy. There is an expectation that everyone will spend some time in the office on a regular basis, recognising that some work is better done face to face. Managers will collaborate with their teams on what works best to meet individual, team, business and organisational needs to enable collaboration, as well as balancing personal choice and wellbeing.