> Markdown version of [/jobs/ext/1245560-band-3-cyber-security-and-operational-resilience-inspector](https://www.wearedevelopers.com/jobs/ext/1245560-band-3-cyber-security-and-operational-resilience-inspector). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Band 3 Cyber Security and Operational Resilience Inspector - **Company:** Office for Nuclear Regulation - **Location:** London, UK - **Experience:** Expert - **Salary:** £71,196.0 - £81,794.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Cyber Security, Information Technology, Cybercrime - **Published:** July 12, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=35edef929cecdfa7 ## About the Role We expect all Cyber Security & Operational Resilience Inspectors to: * Hold a relevant qualification (for example, an NCSC certified master’s degree (e.g. MSc), or equivalent Level 6 qualification (e.g. CISSP) or higher in a Cyber Security or Information Security related discipline). * Hold Full Professional Membership (e.g. MCIIS, MBCS) and/or Chartership of an appropriate professional body (e.g. ChCSP, CITP). Applicants who feel they possess equivalent experience, qualifications and/or professional memberships are invited to apply, however must clearly evidence how their background and skills meet these expectations. It should be noted that the market-based allowance attracted by this post is linked to ongoing professional development/ retention of essential qualifications detailed above. Essential skills and Experience To be effective, the candidate will require a breadth and depth of expertise and skills in technical areas (such as cyber defence, detection, response, resilience and recovery); and a firm understanding of personnel/procedural areas (such as leadership and management, culture, and competence) related to information risk management and cyber security. This is likely to include: * Extensive understanding of the principles, processes and challenges of information risk management and its practical application in a nuclear or high-hazard environment. * Knowledge of current cyber threats and technical security vulnerabilities. * Application of Government protective security procedures and making balanced judgements on adequacy. * Understanding of the principles expected for operators of essential services/ critical national infrastructure sectors in respect to cyber resilience. * Proficiency at managing security risks in a regulated environment. * Leadership in the assessment of cyber security arrangements, including the conduct of audits, assurance activities and/or compliance inspections. * Delivery of concise, accurate, high quality written reports to tight deadlines. * Proven effective judgement and decision-making skills, including an understanding of strategic impact, gathering, and analysing relevant information, evaluating options, applying logical reasoning, and making effective and proportionate risk-based recommendations. * Being open and communicative through the ability to demonstrate highly articulate verbal and written communication skills, including the ability to present complex technical matters to a non-expert audience. * Demonstrable strong influencing skills and an ability to persuade by working collaboratively and flexibly with all stakeholders, showing appropriate interpersonal sensitivity, self-awareness, and assertiveness. * Evidence of managing projects through sound planning, prioritisation, and timely delivery of work to very high standards. * Evidence of effective and professional behaviours throughout delivery of roles. ## Description ONR is not a Civil Service department, however, we are an arms length body of Department of Work and Pensions. The Opportunity As the UK’s independent nuclear regulator, our mission is vital to the nation’s safety and security. We protect society by securing safe operations at nuclear facilities across our nation. This is an exciting role critical to the decarbonisation of the UK’s economy; our national defence; and the decommissioning of our nuclear legacy. A career with ONR will provide you with opportunity to lead and shape our society’s future use of nuclear technology. The Role Effective cyber security is increasingly important as modern technology, and interconnected devices become a fundamental part of everyday life. It’s vital to protect the devices and services we access online and at work from harm. Our Cyber Security and Operational Resilience specialism is responsible for ensuring the civil nuclear sector protects the sensitive nuclear information it holds and appropriately safeguards the systems essential to deliver key outputs and functions. This is achieved primarily through: * Assessment of duty holders’ cyber security arrangements to provide confidence that risks are being adequately managed. * Undertaking regulatory inspections with duty holders to ensure the effective implementation of technical cyber security controls to protect essential functions and the systems that support them (including information technology, operational technology, and sensitive nuclear information). * Conducting inspections of facilities across the nuclear supply chain to ensure cyber security risks are effectively managed. * Contributing to the development of regulatory policy and influencing the development of good practice both nationally and internationally. * Liaison with other regulators (including those in security and safety disciplines) and various Government security and intelligence agencies, including the co-ordination of the sector’s response to high profile cyber security events and incidents. * Representing ONR at security events and meetings, such as those organised by the International Atomic Energy Agency, the World Institute for Nuclear Security, European Nuclear Security Regulators’ Association, the UK Cyber Security Council, and those directly by the UK Nuclear industry. Training to expand and deepen knowledge and experience in specific nuclear, cyber security, operational resilience, information assurance and regulatory topics will be given throughout the successful candidate’s career, however successful applicants will already have demonstrable experience in the field. As experience of regulating nuclear security increases, inspectors are given the opportunity to progress and achieve promotion., * A suitability statement (maximum of 800 words) highlighting how you meet the “essential skills and experience” required for the role, which will be used at shortlisting in conjunction with your CV. * Where applicable highlight if you have any experience under ‘desirable skills and experience’ within the application form. Throughout our selection process, we will make decisions based on evidence you provide. If you are shortlisted, you will be invited to a technical/competency-based interview. AI Tools & Platforms During the application process applicants are allowed to utilise AI (artificial intelligence) platforms and tools to support them in writing their CVs, suitability statements, essential skills and experience. Please ensure that all information submitted is truthful and verifiable. This includes avoiding plagiarism and accurately attributing the work of others, including artificial intelligence generated content, as your own. All presented information will be assessed at the Interview Stage. Important guidance when providing CV’s – please upload text-based CVs with no graphics or pictures to ensure the anonymisation function works correctly. Please note - if whilst completing your application, you use special characters such as (‘ ; “ - _ * ) within your examples, Hireserve will convert these characters into symbols. We are currently unable to change this. Whilst these examples will appear on your application, this will not prevent it from being reviewed at the shortlisting stage. Feedback will only be provided if you attend an interview or assessment. Security Successful candidates must undergo a criminal record check. Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check . See our vetting charter . People working with government assets must complete baseline personnel security standard (opens in new window) checks., * UK nationals * nationals of the Republic of Ireland * nationals of Commonwealth countries who have the right to work in the UK * nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) * nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS) * individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020 * Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [It's not easy being green](https://www.wearedevelopers.com/videos/558-it-s-not-easy-being-green) ## Related Articles - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [Guide for Expats Living in the UK](https://www.wearedevelopers.com/magazine/355-guide-for-expats-living-in-the-uk)