Band 3 Cyber Security and Operational Resilience Inspector

ONR is not a Civil Service department, however, we are an arms length body of Department of Work and Pensions.

The Opportunity

As the UKs independent nuclear regulator, our mission is vital to the nations safety and security. We protect society by securing safe operations at nuclear facilities across our nation.

This is an exciting role critical to the decarbonisation of the UKs economy; our national defence; and the decommissioning of our nuclear legacy. A career with ONR will provide you with opportunity to lead and shape our societys future use of nuclear technology.

The Role

Effective cyber security is increasingly important as modern technology, and interconnected devices become a fundamental part of everyday life. Its vital to protect the devices and services we access online and at work from harm.

Our Cyber Security and Operational Resilience specialism is responsible for ensuring the civil nuclear sector protects the sensitive nuclear information it holds and appropriately safeguards the systems essential to deliver key outputs and functions.

This is achieved primarily through:

• Assessment of duty holders cyber security arrangements to provide confidence that risks are being adequately managed.
• Undertaking regulatory inspections with duty holders to ensure the effective implementation of technical cyber security controls to protect essential functions and the systems that support them (including information technology, operational technology, and sensitive nuclear information).
• Conducting inspections of facilities across the nuclear supply chain to ensure cyber security risks are effectively managed.
• Contributing to the development of regulatory policy and influencing the development of good practice both nationally and internationally.
• Liaison with other regulators (including those in security and safety disciplines) and various Government security and intelligence agencies, including the co-ordination of the sectors response to high profile cyber security events and incidents.
• Representing ONR at security events and meetings, such as those organised by the International Atomic Energy Agency, the World Institute for Nuclear Security, European Nuclear Security Regulators Association, the UK Cyber Security Council, and those directly by the UK Nuclear industry.

Training to expand and deepen knowledge and experience in specific nuclear, cyber security, operational resilience, information assurance and regulatory topics will be given throughout the successful candidates career, however successful applicants will already have demonstrable experience in the field.

As experience of regulating nuclear security increases, inspectors are given the opportunity to progress and achieve promotion.

Line Management Responsibilities

• None currently, however, at this level there could be an expectation to manage staff in the future and to support graduate and apprentice staff through mentoring.

Work with Us

Our colleagues are from all walks of life with varied personal experiences and career journeys into ONR. We want the best people for our roles. As an inclusive employer we value individuals contributions , regardless of their age, gender, race, ethnicity, disability, sexual orientation, social background, religion, or belief. Our values supportive, open-minded, fair and accountable are central to this. We invest in our people to build capability, resilience, and promote wellbeing in our great teams, underpinned by our inherent focus on inclusion and excellence.

Inclusion

We are committed to being an inclusive employer and welcome applicants from all backgrounds. We will consider reasonable adjustments to ensure the recruitment process is inclusive and barrier-free. Please contact [email protected]/ or [email protected] to discuss further. We will also offer an interview to disabled people who meet the minimum criteria for applicants who opt into the guaranteed interview scheme.

We recognise we have a role to play in helping those leaving the Armed Forces and also have a Veterans guaranteed interview scheme. We offer an interview to Veterans who meet the minimum criteria for applicants who opt into the scheme. Please see eligibility criteria below.

• served for at least one year in His Majesty's Armed Forces (as a Regular or Reserve)
• be in transition from, or ceased to be a member of, His Majestys Armed Forces; and
• not already be employed by ONR.

Security Clearance

The successful candidate must hold or achieve and retain National Security Vetting clearance at Developed Vetting (DV) level.

Location/Travel

This post may be undertaken from a base at any one of ONRs office locations (Bootle, Cheltenham, or London).

This post requires some travel including overnight stays predominantly across the United Kingdom and occasionally abroad.

The successful applicant requires a full driving licence which permits the holder to drive in the UK unless reasonable adjustments can be made under the Equality Act 2010

ONR operates hybrid working (working in the office and / or at home) as part of our flexible working policy. There is an expectation that everyone will spend some time in the office on a regular basis, recognising that some work is better done face to face. Managers will collaborate with their teams on what works best to meet individual, team, business and organisational needs to enable collaboration, as well as balancing personal choice and wellbeing.

Person Specification / What Youll Need

Qualifications

We expect all Cyber Security & Operational Resilience Inspectors to:

• Hold a relevant qualification (for example, an NCSC certified masters degree (e.g. MSc), or equivalent Level 6 qualification (e.g. CISSP) or higher in a Cyber Security or Information Security related discipline).
• Hold Full Professional Membership (e.g. MCIIS, MBCS) and/or Chartership of an appropriate professional body (e.g. ChCSP, CITP).

Applicants who feel they possess equivalent experience, qualifications and/or professional memberships are invited to apply, however must clearly evidence how their background and skills meet these expectations.

It should be noted that the market-based allowance attracted by this post is linked to ongoing professional development/ retention of essential qualifications detailed above.

Essential skills and Experience

To be effective, the candidate will require a breadth and depth of expertise and skills in technical areas (such as cyber defence, detection, response, resilience and recovery); and a firm understanding of personnel/procedural areas (such as leadership and management, culture, and competence) related ...