Cyber Process Manager

Position Summary
We are seeking aCyber Process Managerto design, implement, and continuously improve cyber security processes across a large, highly regulated Critical National Infrastructure organisation. This role ensures processes are efficient, consistent, and aligned with regulatory, operational, and business requirements, playing a critical part in embedding structured, repeatable, and auditable practices that underpin compliance and assurance activities. Operating within a technically complex environment, the postholder works closely with compliance, assurance, and ICT delivery teams to integrate cyber processes into day-to-day operations and support strategic objectives. Based in thenuclear sector.

What you'll do

• Lead the design, documentation, and implementation of cyber security processes and workflows
• Ensure cyber processes align with CAF principles, regulatory requirements (e.g., ONR SyAPs, NISR 2003), and internal governance frameworks
• Collaborate with cyber risk, compliance, and assurance teams to ensure process integration and consistency
• Monitor process performance using KPIs and metrics; identify and implement improvements
• Support internal and external audits by maintaining process documentation and evidence
• Act as a subject matter expert on cyber process management, providing guidance to ICT and business stakeholders
• Drive process automation and standardisation to improve efficiency and reduce operational risk
• Maintain a central repository of cyber security process documentation with version control
• Support regulatory engagement with the ONR, providing process insights during inspections, audits, and formal reviews
• Support the Head of GRCA and Cyber Risk Team Lead in embedding a culture of process excellence and continuous improvement

What we're looking for

• Strong experience in process design and improvement, ideally within a cyber security or ICT environment
• Familiarity with process frameworks such as ITIL, COBIT, or ISO 27001
• Understanding of cyber security principles and regulatory requirements (e.g., CAF, NISR, ONR SyAPs)
• Experience with process mapping tools and techniques (e.g., BPMN, Visio)
• Strong analytical, documentation, and stakeholder engagement skills
• Degree or equivalent in cyber security, business process management, or a related field
• Relevant certifications (e.g., ITIL, Lean Six Sigma, ISO 27001 Implementer)
• Desirable: Experience in the nuclear or CNI sector; familiarity with CAF maturity assessments and process audit readiness; experience with process automation tools (e.g., ServiceNow, Power Automate); knowledge of quality management systems and continuous improvement methodologies

What's on offer

• Annual bonus of up to 15%, made up of company and personal performance
• Attractive defined contribution pension scheme company matches up to 13.5% for a 7% employee contribution
• 30 days annual leave + bank holidays, plus ability to purchase an extra 2.5 days per year
• Ability to carry over 10 days annual leave each financial year
• Paid Sick Leave