What You’ll Be Doing

Cyber Security Strategy, Governance & Risk

• Develop and deliver UKAEA’s cyber security strategy, priorities and multi-year roadmap, aligned with organisational objectives, Computing strategy and business needs.
• Lead the cyber security function and own the governance framework, policies, standards and operating principles.
• Oversee enterprise cyber risk, advising senior leaders, ARAC and Executive Committees on risk appetite, risk treatment, investment priorities and strategic decisions.

Security Assurance, Compliance & Resilience

• Lead cyber assurance, regulatory compliance and security improvement, ensuring implementation of GovAssure, CAF, ISO 27001, Cyber Essentials Plus and Secure by Design.
• Oversee audits, cyber resilience, disaster recovery and incident recovery, applying lessons learned and ensuring proportionate security across IT, scientific computing, operational technology and research environments.

Security Operations, Incident & Technology Leadership

• Oversee cyber monitoring, detection, response and recovery, providing strategic leadership during major incidents and organisational crises.
• Embed cyber security and Secure by Design across major technology, infrastructure, scientific and operational programmes, influencing technology decisions, investment and transformation.

Financial, Resource & People Leadership

• Lead cyber security budgeting, forecasting, investment prioritisation and resource allocation, ensuring effective use of internal resources, suppliers and contracts.
• Act as Head of Profession for Cyber Security, setting professional standards, capability frameworks, career pathways and workforce strategies.
• Lead and develop a multidisciplinary team, supporting recruitment, succession planning, skills development and continuous improvement while promoting UKAEA values and an inclusive culture.

External Engagement & Organisational Representation

• Represent UKAEA with government, regulators, the NCSC, research institutions, industry partners and relevant national and international forums, building strategic relationships and influencing cyber security policy and practice.

What You’ll Bring

What You’ll Be Doing

Cyber Security Strategy, Governance & Risk

• Develop and deliver UKAEA’s cyber security strategy, priorities and multi-year roadmap, aligned with organisational objectives, Computing strategy and business needs.
• Lead the cyber security function and own the governance framework, policies, standards and operating principles.
• Oversee enterprise cyber risk, advising senior leaders, ARAC and Executive Committees on risk appetite, risk treatment, investment priorities and strategic decisions.

Security Assurance, Compliance & Resilience

• Lead cyber assurance, regulatory compliance and security improvement, ensuring implementation of GovAssure, CAF, ISO 27001, Cyber Essentials Plus and Secure by Design.
• Oversee audits, cyber resilience, disaster recovery and incident recovery, applying lessons learned and ensuring proportionate security across IT, scientific computing, operational technology and research environments.

Security Operations, Incident & Technology Leadership

• Oversee cyber monitoring, detection, response and recovery, providing strategic leadership during major incidents and organisational crises.
• Embed cyber security and Secure by Design across major technology, infrastructure, scientific and operational programmes, influencing technology decisions, investment and transformation.

Financial, Resource & People Leadership

• Lead cyber security budgeting, forecasting, investment prioritisation and resource allocation, ensuring effective use of internal resources, suppliers and contracts.
• Act as Head of Profession for Cyber Security, setting professional standards, capability frameworks, career pathways and workforce strategies.
• Lead and develop a multidisciplinary team, supporting recruitment, succession planning, skills development and continuous improvement while promoting UKAEA values and an inclusive culture.

External Engagement & Organisational Representation

• Represent UKAEA with government, regulators, the NCSC, research institutions, industry partners and relevant national and international forums, building strategic relationships and influencing cyber security policy and practice.

What You’ll Bring