We are recruiting on behalf of a client in the
nuclear / Critical National Infrastructure (CNI) sector
for a
Cyber Assurance Principal Advisor
to lead the delivery of second-line cyber assurance across key domains including OT, technical architecture, and supply chain. This role ensures cyber security controls are effectively assessed, risks are independently evaluated, and assurance activities are aligned with organisational priorities. You will oversee a team of advisors, manage assurance planning and execution, and act as a key liaison between assurance, operational teams, and senior stakeholders.What you’ll doDeliver second-line assurance activities across either OT, technical architecture, or supply chain domains (these are individual Principal-level roles)Conduct control effectiveness reviews, risk-based assessments, and thematic assurance activitiesProvide expert input into the development of assurance frameworks, methodologies, and reportingCollaborate with first-line teams and third-line audit to ensure comprehensive assurance coverageProduce assurance reports and dashboards for governance forums and regulatory stakeholdersSupport regulatory inspections and audits, including evidence collation and response coordinationTrack and verify remediation of assurance findings and contribute to lessons learnedMaintain awareness of emerging threats, technologies, and regulatory expectations to inform assurance planningLead, mentor, and develop a team of cyber assurance advisors to build capability and consistencyPromote a culture of cyber risk awareness and accountability across the organisationWhat we’re looking forStrong experience in cyber assurance, audit, risk management, or control testing within a regulated environmentIn-depth understanding of cyber security frameworks (e.g., NCSC CAF, ISO 27001, NIST CSF, NIST 800-53)Domain-specific knowledge in at least one of: OT, technical architecture, or supply chain securityStrong analytical, reporting, and stakeholder engagement skillsDegree or equivalent experience in cyber security, engineering, or a related fieldRelevant certifications (e.g., CISA, CISSP, ISO 27001 Lead Auditor, GIAC, CRISC)Desirable: Experience in the nuclear or CNI sector; familiarity with ONR SyAPs, NISR 2003, and HMG SPF; experience with assurance automation or continuous control monitoring; knowledge of risk-based assurance methodologies and toolingWhat’s on offerAnnual bonus of up to 15%, made up of company and personal performanceAttractive defined contribution pension scheme – company matches up to 13.5% for a 7% employee contribution30 days annual leave + bank holidays, plus ability to purchase an extra 2.5 days per yearAbility to carry over 10 days annual leave each financial year
TPBN1_UKTJ…