Critical National Infrastructure Senior Advisor - 34591

Environment Agency Jobs

13h

About The Position

As one of two Critical National Infrastructure and Systems (CNIS) Senior Advisors, you will be working in a small team that provides strategic leadership, consistent standards, and expert capability across physical, personnel, cyber, and supply chain security for CNIS. The roles ensure compliance with national security obligations, resilience, and risk management. We are recruiting for two roles: CNIS Policy and Standards Senior Advisor, and CNIS Threat Intelligence and Risk Senior Advisor. The CNIS Policy and Standards role focuses on designing, publishing, and maintaining CNIS standards and procedures, ensuring alignment with existing asset management and corporate policies. The CNIS Threat Intelligence & Risk role focuses on translating government and sector threat intelligence into actionable organizational posture and maintaining the enterprise CNIS risk register.

Requirements

Technical security knowledge.
Inspirational and collaborative leadership skills.
Ability to protect the organization, its assets, and employees.

Responsibilities

Design, publish, and maintain CNIS standards and procedures.
Ensure alignment with existing asset management and corporate policies.
Draft and update CNIS policy and standards.
Maintain the control framework and document library.
Map standards to the asset lifecycle (design, build, operate, decommission).
Integrate standards into asset management policy and procedures.
Define control assurance methods and evidence requirements.
Run annual policy reviews.
Conduct gap analyses and drive corrective action with the business.
Receive and triage threat briefings (government/sector).
Set and communicate posture levels.
Run horizon scanning.
Produce periodic threat/risk reports to internal key stakeholders.
Own the risk methodology, scoring, and tolerances.
Ensure consistent application of risk methodology across the business.
Coordinate risk prioritization and remediation plans within the business.
Turn government and sector threat intelligence into actionable organizational posture.
Maintain the enterprise CNIS risk register and cross-business view.