Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Cyber Requirements & Compliance Manager role.

Rezi rewrites your resume against Sizewell C's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Cyber Requirements & Compliance Manager posting at Sizewell C — free, in seconds.

About the Role

The Cyber Requirements & Compliance Manager plays a critical role in ensuring Sizewell C's cyber security arrangements align with regulatory, legal, and organizational requirements. Reporting to the CISO, you will lead the development of cyber security strategy, policies, and compliance arrangements, translating complex regulatory obligations into practical business requirements. You will also provide leadership to the Cyber Requirements & Compliance Specialist. As the primary cyber security interface with the Office for Nuclear Regulation (ONR), you will drive regulatory engagement, oversee compliance monitoring, and provide assurance that cyber security controls and governance arrangements are effectively implemented. This is a highly visible role requiring collaboration with senior leaders, regulators, and specialist cyber teams to support the delivery of a secure, resilient, and compliant organization.

Responsibilities

Act as the primary point of contact with the ONR on cyber security and information assurance matters.
Identify, interpret and maintain cyber security requirements arising from legislation, regulation and industry expectations.
Prepare, coordinate and submit regulatory documentation and responses as required.
Support regulatory inspections, reviews and assessments, ensuring requirements are clearly understood and implemented.
Manage regulatory findings, recommendations and improvement actions through to successful closure.
Lead the development and continual improvement of the Cyber Security Strategy, ensuring alignment with business objectives and regulatory expectations.
Translate strategic objectives into measurable outcomes and governance reporting.
Own and govern the organisation’s cyber security policy framework, ensuring policies, standards and procedures remain effective and up to date.
Work closely with technical and business stakeholders to embed cyber requirements across the organisation.
Promote a consistent and risk-based approach to cyber governance and compliance.
Oversee compliance against applicable legislation, regulatory requirements, contractual obligations and recognised cyber security frameworks.
Establish and maintain effective compliance monitoring arrangements that support continual assurance.
Work closely with assurance and audit functions to maintain robust evidence and demonstrate compliance.
Maintain compliance registers, remediation plans and governance records.
Support external audits, assessments and certification activities.
Provide expert advice to governance forums on regulatory requirements, compliance performance and emerging risks.
Prepare reports and executive briefings for the CISO and senior leadership team.
Highlight material risks, compliance gaps and remediation priorities, providing practical recommendations.
Support the ongoing development of cyber governance, reporting and assurance arrangements.

Requirements

UK residency and the right to work in the UK
Active Security Clearance is required and must already be in place
Degree qualified, or equivalent, in Cyber Security, Information Security, Law, Risk Management or a related discipline.
Minimum of five years' experience within cyber security, information security, compliance or a related regulatory function.
At least three years in a role where compliance, policy management, assurance or regulatory engagement formed a core responsibility.
Proven track record managing regulatory obligations and engaging with government regulators or competent authorities.
Experience conducting or overseeing compliance assessments against recognised frameworks such as ISO 27001, NCSC CAF or equivalent standards.
Preparation for and support of regulatory inspections, audits and reviews, including evidence management and action tracking.
Development and implementation of cyber security strategies, policies and governance frameworks within complex organisations.
Holder of, or working towards, a recognised professional certification such as CISSP, CISM or CRISC.
Expertise in ISO 27001/27002 and NIST Cyber Security Framework (CSF) 2.0.
Working knowledge of the NCSC Cyber Assessment Framework (CAF) and information security management systems.
Ability to develop and maintain policy frameworks that translate complex regulatory expectations into practical organisational controls.
Comprehensive understanding of compliance management frameworks, including gap analysis, remediation planning, control validation and audit readiness.
Excellent written communication skills, with the ability to produce strategies, policies, regulatory submissions and executive-level reports.
Experience managing compliance registers, requirements repositories and evidence within enterprise toolsets.
Strong stakeholder engagement and influencing skills, with the ability to work effectively across technical, operational and executive functions.

Skills

ISO 27001/27002
NIST Cyber Security Framework (CSF) 2.0
NCSC Cyber Assessment Framework (CAF)
Information security management systems
Compliance management frameworks
Gap analysis
Remediation planning
Control validation
Audit readiness
Written communication
Stakeholder engagement
Influencing skills
UK nuclear regulatory framework for cyber security (Desirable)
ONR Security Assessment Principles (SyAPs) (Desirable)
Nuclear Industries Security Regulations (Desirable)
NIS Regulations (Desirable)
Audit and assurance methodologies (Desirable)
Internal audit (Desirable)
Second-line assurance models (Desirable)

Location

London
Leiston
Ipswich

Work Type

Hybrid working
Permanent
Full-time

Experience Level

Minimum of five years' experience within cyber security, information security, compliance or a related regulatory function.
At least three years in a role where compliance, policy management, assurance or regulatory engagement formed a core responsibility.
Previous people management, team leadership or functional leadership experience within a cyber security, governance or compliance environment (Desirable)

Education Level

Degree qualified, or equivalent, in Cyber Security, Information Security, Law, Risk Management or a related discipline.

Salary/Compensations

£86,000 - £89,000 depending on experience

Benefits

28 days annual leave per annum, increasing to 30 days after 5 years of service, plus bank holidays
10% annual bonus
Defined Contribution Pension Scheme with up to 7.5% employee contribution 15% employer contribution
Life Assurance: Up to 8 x salary

About the Company

Sizewell C is entering an exciting phase of growth as we mature into an independent organisation and continue building one of the UK’s largest and most important energy projects.
Be part of one of the most important low-carbon energy projects in the UK.
Work in a mission-driven environment that values innovation, integrity, and long-term sustainability.