IT Security Manager

About this role

On behalf of the Nuclear Decommissioning Authority, we are looking for an IT Security Manager (Inside IR35) for a 9 Month contract based Hybrid in either Cumbria, London, Warrington or Oxford two days per week.

The Nuclear Decommissioning Authority (NDA) is a non-departmental public body created through the [1] Energy Act 2004.

We have 5 offices across the UK, in Cumbria, Dounreay, Harwell, Warrington and London. We have 17 sites including the first fleet of nuclear power stations, research centres, fuel-related facilities, and Sellafield, which has the largest radioactive inventory and the most complex facilities to decommission.

We are sponsored by the Department for Energy Security and Net Zero (DESNZ) and supported by Dounreay, Magnox, Nuclear Waste Services, Nuclear Transport Solutions and Sellafield. The Scottish government also has a governance role, working closely with DESNZ to ensure its expectations are met.

Our role is strategic - we establish the overall approach, allocate budgets, set targets and monitor progress.

We do not have a hands-on role in cleaning up our facilities. Instead, we deliver our mission through others, primarily 12 businesses.

We are responsible for

• Decommissioning and cleaning up these nuclear facilities ensuring that all waste products, both radioactive and non-radioactive, are safely managed.
• Implementing policy on the long-term management of nuclear waste.
• Developing UK-wide strategy and plans for nuclear Low Level Waste (LLW).
• Scrutinising the decommissioning plans of EDF Energy, who own the operating fleet of Advanced Gas Cooled Reactor (AGR) nuclear power stations.

SC Clearance is an essential requirement for this role, as a minimum you must be willing & eligible to undergo checks. Please note, due to the exceptional requirements of this position (short-term nature of this role and speed at which we require a postholder in situ) preference may be given to candidates who meet all of the essential criteria and hold active security clearance.

As an IT Security Manager, your main responsibilities will be:

• Manage IT security across infrastructure, networks, and cloud environments
• Implement security frameworks, policies, governance, and controls
• Identify and mitigate IT security risks
• Lead incident response and improve system resilience and performance
• Collaborate with internal teams and external agencies (e.g., government and regulators)
• Contribute to IT security strategy, architecture, and transformation

Essential

• Strong technical knowledge of IT systems and security tools
• Experience in regulated environments and risk management
• Ability to design and implement security solutions, including for legacy systems
• Strong stakeholder communication (technical and business)
• Experience managing third-party service providers (MSPs)
• Active Security Clearance (SC) is required for this position

Please be aware that this role can only be worked within the UK and not Overseas.

Disability Confident

As a member of the Disability Confident Scheme, NDA guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy. In cases where we have a high volume of candidates who have a disability who meet all the essential criteria, we will interview the best candidates from within that group. This scheme encourages candidates with a disability and/or neurodivergence to apply. In exceptional circumstances, we may also need to apply the desirable criteria in our shortlisting process which may include holding active security clearance.

Armed Forces Covenant

The Nuclear Decommissioning Authority guarantees to interview veterans or spouses / partners of military personnel who meet all the essential criteria for the vacancy. In cases where we have a high volume of ex-military candidates / military spouses or partners, who meet all of the essential criteria, we will interview the best candidates from within that group. In exceptional circumstances, we may also need to apply the desirable criteria in our shortlisting process which may include holding active security clearance.

In applying for this role, you acknowledge the following "this role falls in scope of the Off Payroll Working in the Public Sector legislation. Any rates of payment quoted will reflect the gross rate per day for the assignment and will be subject to appropriate taxes and statutory costs. As such the payment to the intermediary and your income resulting from this contract will be different".

Visible links

1. https://www.legislation.gov.uk/ukpga/2004/20/contents

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.