Cyber Requirements & Compliance Specialist

Sizewell C is entering an exciting phase of growth as we mature into an independent organisation and continue building one of the UK’s largest and most important energy projects. We are now recruiting the below position:

Position: Cyber Requirements & Compliance Specialist

• Security Clearance: Active Security Clearance is required and must already be in place
• Location: London, Leiston or Ipswich, with hybrid working and a minimum of 2 days per week on-site. Travel to other Sizewell C locations may be required.
• Contract: Permanent, full-time
• Salary: £66,866 – £68,000 depending on experience, plus benefits

Benefits include:

• Annual Leave: 28 days per annum, increasing to 30 days after 5 years of service, plus bank holidays
• Bonus: 5% annual bonus
• Pension Contributions: Defined Contribution Pension Scheme with up to 7.5% employee contribution 15% employer contribution
• Life Assurance: Up to 8 x salary

Closing Date: 1st October 2026

About the Role:

The Cyber Requirements & Compliance Specialist plays a key role in supporting Sizewell C's cyber security strategy, governance and compliance activities.

Reporting to the Cyber Requirements & Compliance Manager, you will help ensure cyber security requirements, policies and standards remain aligned to regulatory obligations, organisational objectives and evolving threats. You will support the development of the cyber security policy framework, maintain compliance documentation and evidence, and help monitor compliance against regulatory, contractual and organisational requirements.

Working closely with cyber security, digital, assurance and business stakeholders, you will contribute to a robust and effective cyber governance framework that supports the delivery of a secure and resilient organisation.

Key Responsibilities:

Cyber Security Strategy & Policy

• Support the development and continual improvement of the Cyber Security Strategy.
• Draft, maintain and enhance cyber security policies, standards and supporting documentation.
• Coordinate policy reviews, updates and approvals in line with governance requirements.
• Monitor alignment between cyber security strategy, organisational objectives and relevant regulatory expectations.
• Track the delivery of strategic cyber security objectives and contribute to progress reporting.
• Promote awareness and understanding of cyber security policies and requirements across the organisation.

Compliance Governance & Monitoring

• Maintain a detailed understanding of cyber security compliance obligations applicable to Sizewell C.
• Identify, interpret and document cyber security requirements arising from legislation, regulations and industry standards.
• Maintain compliance registers, evidence repositories and supporting documentation.
• Monitor compliance against regulatory, contractual and organisational requirements.
• Identify compliance gaps and work with stakeholders to support remediation activities.
• Support the development and operation of continuous compliance monitoring processes.
• Work closely with assurance functions to ensure compliance activities are aligned with assurance programmes and audit requirements.

Requirements & Cross-Functional Support

• Monitor developments in the cyber threat landscape, regulatory environment and industry best practice.
• Translate regulatory, business and security requirements into clear and actionable documentation for technical and non-technical audiences.
• Support the adoption of secure-by-design principles across the organisation.
• Work with security architecture, risk and controls teams to ensure policies, requirements and controls remain aligned.
• Contribute to the definition and maintenance of cyber security requirements that support organisational objectives and regulatory expectations.
• Support continuous improvement initiatives across cyber governance, compliance and requirements management activities.

Governance, Audit & Reporting

• Support governance forums by providing updates on compliance performance, regulatory readiness and emerging risks.
• Assist with the preparation of compliance reports, regulatory submissions and briefing materials.
• Produce audit-ready documentation and management information for governance and leadership audiences.
• Contribute to assurance reviews, audits and evidence-gathering activities.
• Support engagement with regulators and external stakeholders where required.
• Track regulatory findings, recommendations and actions through to closure.
• Assist with external certification activities, including ISO 27001 and Cyber Essentials Plus.

Knowledge & Skills:

• Strong understanding of cyber security principles, governance frameworks and compliance management practices.
• Knowledge of compliance monitoring processes, including evidence management, gap analysis, remediation tracking and audit readiness.
• Ability to interpret regulatory requirements, industry standards and organisational needs, translating these into clear policies, standards and requirements. Excellent written communication skills, with the ability to produce high-quality policies, procedures, reports an