Technical Advisor, Security & Resilience

About this role

Please note that the advert will close at 00:01 on Friday 18 September, so we advise getting your application in by no later than midnight on Thursday 17 September.

About Ofcom

As the UK’s communications regulator, we’re delivering vital work that helps keep the UK connected and shapes the future of how we’ll stay connected with each other.

Our work covers everything from phones and broadband, through to TV, radio, the postal service, and wireless devices. We’re also taking on the challenge of making the online world a safer place. And we need people of all backgrounds, skill sets, and experiences to help us achieve our goal of making communications work for everyone.

About the team you’ll be part of

The purpose of the Infrastructure and Connectivity Group is to advance a better-connected UK so people and businesses can participate in and benefit from a digital society. We do this by helping deliver the connectivity that supports the services people and businesses want, promoting competition and investment in the industries we oversee and helping make sure that communications networks are secure and resilient.

Our work helps drive innovation, deliver consumer choice and value, and makes sure people and businesses get the services they need. Technology in our sectors changes fast and there are always new and exciting issues to explore. In a time of significant digital disruption, we support economic growth by ensuring that our communications infrastructure meets the country’s needs and enables a wide range of digital services.

The purpose and scope of the role

Working closely with other members of the Security & Resilience Supervision team, you will be responsible for the continuous development and implementation of the regulatory supervision over telecoms providers. This role will require you to have in depth knowledge of telecoms providers and demonstrate technical insights to help develop and implement guidance on network topology, security, operations and processes so that Ofcom’s policy position and approach to the regulation of the security requirements is effective appropriate and measurable. This role will require you to provide technical insights and support the delivery of our supervision of telecoms providers’ obligations against the Telecommunications Security Act (2021), or the “TSA”.

In the light of the increasing economic and social significance of communications and services, the changing technological and communications landscape, as well as the evolving and increasing level of threats, the security and resilience of fixed and mobile networks and services is becoming more important. We are taking proactive steps to ensure that they are designed and operated to meet the needs and expectations of users.

Your Key Responsibilities

Support the development and implementation of a supervisory program promoting the adoption of the new legislation underpinning the TSA. This will include maintaining and supporting a compliance monitoring regime that will provide annual report to the SOS (Secretary of State) for DSIT. The program includes a variety of engagements with telecoms providers to gain a clear understanding of their current and future implementation of measures to comply with their obligations in the TSA.

Work with other members of the team, responding to and assessing telecoms and digital infrastructure company responses to security and resilience incidents that occur in their infrastructure which are reported to Ofcom. Ensuring enough information is present to deliver a sound security risk assessment.

Work with colleagues in Ofcom the Enforcement team to provide technical support in relation to any enforcement activity.

Work with industry stakeholders, Government and other relevant agencies to ensure policy goals are aligned and effectively coordinated.

To provide (when required) assistance to other teams within Ofcom including our policy teams and for our other responsibilities within the Security & Resilience Supervision Team. This includes our regulatory obligations for the Network & Information Systems (NIS) regulation of the Digital Infrastructure sector and our upcoming remit for Data Centres

The skills, knowledge and experience you’ll need for success

• Experience in security assurance and risk management within telecommunications or a related technology environment, including involvement in audits, remediation activities, and assurance monitoring.
• Demonstrated ability to assess technical vulnerabilities and apply appropriate controls, with exposure to cyber security risk management practices, including risk assessments, or threat modelling.
• An understanding of areas such as vendor risk and broader security considerations (including human and physical aspects).
• Awareness of cyber security threats within telecommunications or similar regulated sectors, including an understanding of evolving threat landscapes and risk considerations.
• Broad familiarity with telecoms technologies, such as fixed and mobile networks, signalling (e.g. GSM to 5G), and virtualisation, or transferable experience from related technology domains, with an interest in applying best practices and keeping up to date with emerging developments.
• Articulating Ideas: Written and oral communication skills, including presenting to internal and external audiences.
• Executing Plans: Experience in project management, including developing and delivering plans, and managing risks and issues.
• Building solutions: Ability to identify problems and develop practical solutions to make things better and/or keep projects or programmes on track.

Qualifications

• Hold or be prepared to obtain (in the role) a UK Cyber Security Council accreditation.
• Maintains UK security clearance or is willing to undergo a vetting check (once started), as this is a mandatory requirement for the role.

Inclusive hiring at Ofcom

At Ofcom, our mission is clear: to make communications work for everyone. To achieve that, our people must reflect the diversity of the UK, in background, identity and experience.

We believe innovation thrives when difference is valued and everyone feels empowered to contribute their ideas and perspectives. That’s why we welcome colleagues of all ethnicities and races, sexes, genders and gender identities, sexual orientations, ages, faiths and beliefs, and those with apparent and non‑apparent disabilities. We value socio‑economic diversity, life experience and neurodiversity too. Whether you’re a carer, a parent, a veteran, or re‑entering work after time away, your voice and perspective matter here.

Flexibility is at the heart of how we work because we want you to thrive in a way that suits you best. Most roles can therefore be adapted for part‑time hours, job shares, or other flexible arrangements. Learn more about our Rewards, Benefits and Wellbeing on our careers page.

Our recruitment process is intentionally designed to be open and accessible. If you need adjustments, information in a different format or an alternative way to apply, contact us at resourcing@ofcom.org.uk or 0330 912 1378.

As a proud Disability Confident Leader, we guarantee interviews for disabled applicants who meet the essential criteria for a role. You can read more about this commitment here.

Whoever you are, whatever your story, you belong at Ofcom.

About risk & resilience roles for ex-police

Risk management, business continuity and emergency-planning roles. Contingency planning, threat assessment and multi-agency coordination experience from policing is directly transferable.