Cyber Security Policy Expert

As Great Britain's regulator for the energy industry, Ofgem exists to ensure a safe, secure and sustainable energy supply to British households and businesses.

Join us in a pivotal role at the heart of our Cyber Security Directorate. This is a fantastic opportunity to have a bold impact on Ofgem's Cyber Security Policy. You'll drive continuous improvement within the Downstream Gas and Electricity sector in order to protect consumer's energy supply. You will be at the focal point of a multidisciplinary team where your expertise will provide comprehensive knowledge to lead the development and implementation of Ofgem's future organisational policies and methodologies. Your strategic leadership will oversee the delivery of work and set valuable deliverables on time, providing a high standard of work through effective project management and the support of your team. 

We are seeking a candidate who will have significant experience of government or organisational policy development and regulation compliance. As a seasoned Cyber Security Policy Expert, you'll have extensive experience working in Cyber Security, with preferable experience relating to Critical National Infrastructure. Working in a high risk environment, you'll be vigilant in handling complex scenarios and have a deep understanding of risk management. Your strong communications skills will provide you with the ability to deliver whilst working with a diverse group of stakeholders.

If you're ready to make a transformative impact in the energy sector, apply now and become part of a committed team dedicated to a sustainable future.

Ofgem has a culture of inclusion that encourages, supports and celebrates the diverse voices and experiences of our colleagues. It fuels our innovation and helps ensure we can best represent the consumers and the communities we serve. Everyone is welcome - as an inclusive workplace, our employees are comfortable bringing their authentic selves to work.

#LIRemote

Ofgem works on behalf of energy consumers to ensure that every household and business in the UK can rely on a safe, affordable and environmentally sustainable energy supply.  We are playing a vital part in accelerating the transition to Net Zero and a carbon neutral energy system - a goal that everyone wants to achieve.  Whatever your role, you'll be playing your part in creating new energy solutions that are great for customers, and great for the environment. 

Ofgem has a culture of inclusion that encourages, supports and celebrates the diverse voices and experiences of our colleagues. It fuels our innovation and helps ensure we can best represent the consumers and the communities we serve. Everyone is welcome - as an inclusive workplace, our employees are comfortable bringing their authentic selves to work.  

This role will be part of Cyber Security Directorate at Ofgem which, acts as Joint Competent Authority ("CA") for The Security of Network & Information Systems Regulations ("NIS") and the Authority for Smart Energy Code ("SEC"). The team is focused on compliance and enforcement, as well as assisting operators in improving the cyber resilience posture in the Downstream Gas and Electricity sector ("DGE") in order to protect consumer's energy supply. 

Purpose 

• Operate as Ofgem's Cyber Policy expert, leading the development of mechanisms to drive continuous improvement within the DGE sector and wider Competent Authorities in the UK and Internationally. 
• Be the focal point and expert in a multi-disciplinary team in a specific work area in the context of operating in a Professions and Flexible Resourcing model. 
• Plan, oversee and deliver a set of work deliverables on time and to a high standard through effective project management and support of multidisciplinary team members. 
• Provide inclusive corporate leadership, using your expertise to provide comprehensive knowledge sharing, support and development that demonstrate commitment to Ofgem values. 

Key Responsibilities:  

Lead projects with high strategic impact, setting a strategy that can be used in the long term and across the whole organisation. 

• Lead on Ofgem's cyber security strategic approach to improve cyber resilience across the DGE sector, providing expert input on policy, regulation and compliance. 
• Shape strategic direction based on quantitative and qualitative data to support the creation of evidence-based policy. 
• Provide policy leadership and thought leadership to technical and non-technical stakeholders, including senior internal and external stakeholders. 
• Provide expert policy input on future policy development with DESNZ and DSIT. Leading engagement and influence on behalf of Ofgem. 
• Lead Ofgem's engagement with other CAs in the UK and internationally.  

To support the team deliverables, that utilise your expertise to ensure successful outcomes across team members and collaborating teams: 

• Provide clear and transparent work objectives, milestones and success metrics in your area of expertise to oversee and co-ordinate successful team outcomes. 
• Collaborate closely with other teams to manage interdependencies, risks and resourcing to support portfolio delivery. 
• Where required, be jointly responsible with the PDL on welfare and pastoral care of all colleagues. 
• Demonstrate effective diversity and inclusive team management within their team and the wider organisation. 

Key Outputs and Deliverables  

• Develop and maintain Ofgem's long term strategy to improving cyber resilience within the DGE sector. Taking an evidence-based approach which is integrated within existing governance structures. 
• Lead engagement with DESNZ, DSIT and NCSC on future policy and more widely across other CAs within the UK and Internationally. 
• Lead the development and implementation of future policy within Ofgem by utilising regulatory tools. 
• Lead innovation and development of organisational policies, products, and methodologies to drive continuous improvement. 
• Create and clearly communicate policy expectations to the DGE sector. 
• Be an active member of the UK security community by sharing best practice across the DGE sector. 

Support the development of a high-performing team based on effective resource management, ongoing support and professional development: 

• Provide expert guidance to help team members deliver, by building supportive, inclusive team environment based on trust-based relationships, transparency and inclusivity. 
• Takes ownership for own continued expert development and other team members' professional development relating to the role by: 
• Identifying your own continued professional development. 
• Providing ongoing coaching and identification of development opportunities.  
• Provide advice and support for colleagues who are pursuing professional qualifications.  

Essential Criteria

• Significant experience of government or organisational policy development and/or regulation and compliance. (Lead criteria) 
• Experience of working in Cyber Security, preferably relating to Critical National Infrastructure and knowledge of NIS Regulations, NCSC's CAF.  
• Good understanding of risk management. 
• Strong communication skills and the ability to demonstrate delivery whilst working with a diverse group of stakeholders.  
• Able to achieve and maintain SC clearance.