Senior Supply Chain Auditor

**Gloucester Business Park (Flexible)**

We are looking for the Senior Supply Chain Auditor to join the Nuclear Security Team to provide information to deliver the required level of assurance of mandated and claimed information security mitigations across the entire nuclear supply chain and effective implementation of The Technical Client Organisation’s common nuclear licensee supply chain assurance strategy which encompasses both Classified and Non-Classified contracts.

You will lead a small team of analysts with skills in the support of assurance activities.

If this sounds interesting, then please consider applying.

**Pay, benefits and culture**

Alongside a salary of upwards of £50,000 per annum depending on experience, we offer a competitive benefits package, including a car allowance, a company pension scheme, a wide range of flexible benefits to suit your lifestyle, and the opportunity to earn a 10% bonus.

At EDF, everyone’s welcome. We strive to create an inclusive and diverse environment where everyone has a voice and where you feel confident being yourself. We’re committed to equality, diversity, and inclusion. We’d like our future workforce to have an equal gender balance, represent a broad mix of people from minority ethnic backgrounds, LGBTQ+, those with a disability, and support social mobility.

We’ll value the difference you bring and offer opportunities for you to thrive and succeed.

**What you’ll be doing**
- Managing staff health, well-being, their personal development and competencies.
- Creating an inclusive work environment recognising and respecting cultural differences across the organisation.
- Ensuring compliance for the award and ongoing risk management of contracts.
- Creating trusting relationships with both internal and external stakeholders including regulators (particularly the Office for Nuclear Regulation), BEIS (Department for Business, Energy & Industrial Strategy and at times NCSC (National Cyber Security Centre).
- Identifying and delivering opportunities for continual improvement and organisational collaboration.
- Providing support to the team to resolve issues requiring escalation.
- Prioritising and shaping the activities of your team to meet business needs.
- Delegated authority from the client to make informed decisions.
- Interpret a wider range of both nuclear and non-nuclear regulations.
- Provide bespoke technical specialist matter expert advice to the nuclear licensees and their supply chain partners.
- Clear articulation of security requirements within licensees’ procurement and contractual arrangements.
- Consistent auditing of supplier security arrangements using a graded approach aligned with the risk appetite of the nuclear licensees.
- Capturing risks and tracking all non-conformances or improvement plans to reach expected outcomes.
- Ensuring work is appropriately logged, tracked and reported to the Cyber Security Assurance Manager, including the maintenance of List N entries (List N relating to a regulatory requirement).
- Provide technical guidance to other nuclear licensees’ procurement functions.
- Promote information security policies, procedures and practice to nuclear licensee procurement staff, contractors and third parties to improve information security awareness and performance.
- Assist in the development and maintenance of information security mitigations that are required to be mandated in supplier contracts.
- Key interface with our regulator in relation to contract management, incidents impacting suppliers and security assurance of third parties on behalf of our clients.
- Ensure supply chain security assessments and requirements keep pace with the ever changing cyber threat, the deployment of new technologies that could present new security risks to the nuclear licensees and relevant best practice.

**Who you are**
- Educated to degree level (or equivalent) or have a comparable level of practical experience.
- Working experience of formal accreditation and risk assessment methodologies, such as ISO27005 or NIST.
- Experience in providing security guidance and undertaking assurance reviews of IT system support functions and procedures in a highly regulated environment.
- Strong documentation writing skills required for the ongoing development of related compliance procedures.
- Excellent written and oral communication skills.
- A recognised security or audit certification is desirable e.g. CISSP, CISA, ISO2700X auditor, ITPC Accreditor, CCP (SIRA/Accreditor/Auditor/ITSO) or similar.
- Good working knowledge of applicable national and international standards and information security frameworks (ISO27001, HMG Security Policy Framework) and NCSC/CPNI security standards and guidance.
- Excellent understanding and practical experience of complex information security challenges, threats and risks.
- Experience of defining, understanding and interpreting contractual security clauses and requirements (preferably in alignmen