26 jobs found

West Yorkshire Pension Fund (WYPF) is one of the largest and most respected pension schemes within the Local Government Pension Scheme (LGPS), managing approximately £20 billion in invested assets. We're part of the £60+ billion Northern Pool for pension investments, and unlike many other LGPS funds, a significant portion of our assets are managed in-house by our expert team. Details below. We are seeking an exceptional leader with a proven track record in managing significant investment portfolios, ideally within the public sector or a comparable pension environment. You'll need a strategic mindset, strong leadership capabilities, and the ability to deliver investment returns that balance risk and reward in line with WYPF's long-term objectives. This is a rare opportunity to take on a senior leadership role at a forward-thinking and stable pension fund, highly regarded for its consistent investment performance and low administrative costs. Operating on behalf of five West Yorkshire councils and hosted by Bradford Council, WYPF manages pensions for over 500,000 members across a range of employers, including local authorities, educational institutions, housing associations, and fire authorities. We've built a strong reputation as a national leader within the sector, known for our efficient administration, excellent returns, and proactive approach to investment management. The role As Chief Investment Officer, you will play a critical role in shaping and delivering WYPF's investment strategy. You'll oversee a skilled in-house investment team of around 30, working to maximise returns, manage risk, and deliver long-term value. Your role will be to ensure the investment portfolio meets the needs of our members and stakeholders, while also navigating the evolving regulatory and market landscape. You'll work closely with senior leadership across WYPF and Bradford Council, as well as with key governance bodies, including the Investment Advisory Panel and Local Pensions Board. A key aspect of the role will involve collaborating within the Northern Pool, ensuring WYPF's interests are represented, and contributing to regional and national policy discussions, especially in relation to Environmental, Social, and Governance (ESG) factors. What we're looking for Extensive experience in senior-level investment management, preferably within a pension fund or institutional setting A demonstrable track record of delivering strong investment performance in line with strategic objectives Strong leadership and communication skills, with the ability to influence and engage across multiple stakeholder groups A deep understanding of regulatory, governance, and ESG issues affecting the pension sector Proven ability to manage and develop high-performing teams in a dynamic environment What we offer In return, you will join a highly respected organisation that offers both stability and the opportunity to make a significant impact. Alongside a competitive salary you will benefit from: Hybrid working arrangements Generous annual leave and Local Government Pension Scheme membership Access to a range of employee benefits, including discounted travel, Cycle to Work scheme, and more A supportive and inclusive working environment committed to diversity and equality Corporate responsibilities 1. Contribute to the strategic leadership of the Council by establishing, leading, developing and implementing effective strategies and plans that will deliver the Council's priority outcomes. 2. Create, encourage and role model a culture of achievement and service excellence through efficiency and continuous improvement. 3. Inform, support and advise Elected Members so that they can fulfil their executive, scrutiny and representational responsibilities. 4. Design and implement service delivery standards and performance criteria and develop and mature key performance data. 5. Champion employee engagement and experience ensuring Bradford Council is a great place to work and has an inclusive culture in which all staff have a voice and are supported in achieving their potential. 6. Ensure the department resources are used and managed effectively, efficiently and sustainably and in accordance with Council Standing Orders and Financial Regulations. 7. Ensure that all decisions made across the department are based on sound risk management principles which comply with Council procedures and processes within its financial, legal, ethical and statutory frameworks. Service focused responsibilities 1. Ensure adequate decision-support techniques, processes and skills are in place with an emphasis on delivering the service across the full range of business activities, both internally and externally managed, and improving both investment returns and value for money. 2. Ensure financial reporting, audit and control mechanisms are in place for all activities, including external custody, and the budgetary monitoring and reporting system is effective and capable of meeting all cost and performance disclosure requirements. 3. Put arrangements in place so all aspects of the investment management function including: • Long Term Strategy • Tactical Asset Allocation • Implementation • Performance • Reporting 4. Ensure all requirements of the Local Government Pension Scheme Investment Regulations are met, including developing and revising the policy statements required, in accordance with the relevant guidance issued by the Secretary of State or the National Scheme Advisory Board. 5. Lead on the development of investment strategy to manage the portfolio with the objective of delivering the rate of return required by the actuarial valuation to ensure employer contributions are minimised, and maintained at as consistent a level as is possible. 6. Create and sustain effective working relationships with Northern Pool Partners, to promote efficient and effective joint working. 7. Be appointed as a director of Northern Pool joint venture companies, or other corporate structures as may be required from time to time, for the efficient management of investments within the pool, representing the interests of WYPF to the extent permitted by law. 8. Lead the development of plain English easy-to-understand management reports. 9. Support the development of the Northern Pool to enable the Joint Committee to fulfil its role under the Investment Regulations and Guidance. 10. Ensure professional and technical employee development plans are in place. 11. Ensure the principles of automation and digital by design run through the service's activities. Qualifications A relevant degree, CFA, CCAB or equivalent qualification, however candidates with exceptional senior level investment management experience will be considered. Current membership of an appropriate professional body. Demonstrable recent and continuing professional and personal development. Experience 1. Successful leadership and senior management experience within a comparable pensions or other significant investment environment. 2. Successful experience of overseeing, developing and guiding investment strategy and decisions in a comparable environment (i.e. a pension fund or other similar investment environment) ideally across all asset classes. Direct investment experience in a relevant area at scale would be an advantage (this is desirable but not essential). 3. Significant successful experience of delivering investment returns that match or exceed the market in the long-term, within a modern, socially aware investment environment. 4. Successful experience of developing positive and effective senior relationships, partnerships and alliances to deliver strategic and operational priorities. 5. Successful experience of using highly developed communications skills to influence, engage, connect and develop understanding across diverse audiences on complex investment related matters. 6. Relevant successful experience which demonstrates the capacity to manage financial, people and other resources, including modernisation and service improvement, and develop a highly motivated, high performing organisational culture. 7. Experience of exercising excellent judgement in challenging and sensitive circumstances, providing advice at board or a senior political level on challenging matters which demonstrates highly developed political skills and sensitivity. 8. A commitment to promoting and delivering positive solutions to achieve diversity, equality of opportunity and inclusion. Knowledge, Skills and Abilities 1. A highly developed understanding of the legal, regulatory, financial, risk, policy, governance and ethical context in which WYPF operates, including a high-level understanding of the ESG agendas. 2. Able to provide advice at board level, based on sound, evidence-based judgments, on organisational strategy, risk, investment policy and all areas relevant to WYPF. 3. Able to lead and manage the investment side of WYPF, to inspire, guide, motivate and develop people to achieve high performance. 4. Able to build wide network of relationships and effective partnerships, to develop rapport and work effectively with a diverse range of people, to further strategic and operational objectives. 5. Ability to influence national and regional policy around investments, and other related and relevant areas to WYPF. 6. Ability to thrive and achieve organisational success in a democratically accountable, politically led organisation that serves the interests of its members and employers. 7 . click apply for full job details

Ofcom looks after communications in the UK. From phones and broadband to TV, radio, post and wireless devices, we regulate services at the heart of people's everyday lives. This is an exciting time for this work area within Ofcom. We are delivering vital work to help shape the communications services today and tomorrow. One of Ofcom's priorities is enabling strong, secure networks. The safety and security of the UK's communications networks are vitally important. We aim to deliver this by working closely with Government, National Cyber Security Centre and industry. In addition to the telecoms sector, Ofcom has new responsibilities under NIS for the "Digital Infrastructure subsector". This includes companies providing essential services in the following areas: DNS resolution and authoritative hosting TLD name registries Internet Exchange Points The Network Security team is responsible for delivering against these important priority areas for Ofcom. Working closely with other members of the Network Security team, this role is responsible for working across the various cyber security regulatory regimes implemented by the team. This includes: Telecoms sector (Telecoms Security Bill) Digital Infrastructure industry (Network and Information Systems Regulations - NIS) TBEST - Ofcom led penetration tests being carried out across telecoms and NIS companies. The successful candidate will demonstrate technical insights, help develop and implement guidance on, the monitoring of network topology, security, operations and processes, so that Ofcom's security regulation is effective, appropriate and measurable. The role will primarily be assigned to one of these regimes based on candidate experience but will provide assistance across other areas as required. To provide cyber security technical expertise across the regulatory regimes implemented by the Network Security team Support the development, roll out, management and monitoring of a programme promoting compliance with the new legislation in the Telecoms Security Bill and associated guidance. This includes designing and operating a compliance monitoring regime, and contribuitng to producing an annual report for the SOS (Secretary of State) for DCMS (Department of Culture, Media and Sport) on compliance levels across the sector. Work with other members of the team in assessing any compliance implications arising from security and resilience breaches that are reported to Ofcom by regulated companies. Support the management of a threat intelligence lead vulnerability testing scheme that has been introduced across the major Communications Provider community. This will include, working with stakeholders in scoping, agreeing, and managing the testing, and monitoring progress against a remedial action plan of vulnerability tests. Work closely with NCSC in their role as the UK's cyber security technical lead, DCMS, and other regulators. Work with colleagues in Enforcement and Legal teams in Ofcom to provide technical support in relation to any compliance enforcement activity. Work with industry stakeholders, Government and other relevant agencies to ensure policy goals are aligned and effectively coordinated. Good experience and understanding of conducting security assurance assessments or audits, and subsequent management of remediation plans, within the telecoms or the digital infrastructure sectors. Sound understanding of the types of threat actors that would target Ofcom's regulated sectors and security threats they present. Comprehensive experience in evaluating technical security vulnerabilities and identifying reasonable and appropriate control measures. Broad experience across all cyber security risk management domains (strategy, governance and risk management, protection, detection, response, recovery and resumption of services, situational awareness, testing). Understanding of network topologies including fixed, mobile, and digital infrastructure such as DNS and domain name registry services, and internet exchange points. Experience in practical application of cyber standards and guidance, such as 10 Steps to Cyber Security, NIST etc. Maintaining an ongoing awareness and understanding of emerging telecoms or digital infrastructure technologies, including via training, industry liaison and identifying, commissioning and managing specific external technical research projects. Excellent communication skills including clear and effective presentation skills to both internal and external audiences. Preferably educated to degree level (or equivalent). Relevant professional security qualifications, such as such as CiSP or CISM. Willing to obtain security clearance to "SC" level. Experience of project management including developing and delivering against plans, managing risks and issues along the way. Good experience and solid understanding in at least one of the following technical areas: Virtualisation of telecoms networks functions Telecoms signalling systems Supply chain management and vendor contractual arrangements Third party network access User identity management Asset management Auditing and testing Knowledge of the regulatory environment. Experience in working in a communications provider, digital infrastructure operator, or a technology-based consultancy. Diversity and Inclusion Ofcom is a forward-thinking, inclusive employer and recognises the value of diversity to truly "make communications work for everyone". Here at Ofcom, our vision is to ensure people are part of an environment when they can truly strive and be themselves, therefore we aim to recruit from the widest pool of candidates possible - irrespective of social background, ethnicity, sexual orientation, gender or disability. We are an organisation that strives to be truly representative of the whole of the UK and our aim is to be an employer of choice for everyone.

Ofcom looks after communications in the UK. From phones and broadband to TV, radio, post and wireless devices, we regulate services at the heart of people's everyday lives. This is an exciting time for this work area within Ofcom. We are delivering vital work to help shape the communications services today and tomorrow. One of Ofcom's priorities is enabling strong, secure networks. The safety and security of the UK's communications networks are vitally important. We aim to deliver this by working closely with Government, National Cyber Security Centre and industry. In addition to the telecoms sector, Ofcom has new responsibilities under NIS for the "Digital Infrastructure subsector". This includes companies providing essential services in the following areas: DNS resolution and authoritative hosting TLD name registries Internet Exchange Points The Network Security team is responsible for delivering against these important priority areas for Ofcom. Working closely with other members of the Network Security team, this role is responsible for working across the various cyber security regulatory regimes implemented by the team. This includes: Telecoms sector (Telecoms Security Bill) Digital Infrastructure industry (Network and Information Systems Regulations - NIS) TBEST - Ofcom led penetration tests being carried out across telecoms and NIS companies. The successful candidate will demonstrate technical insights, help develop and implement guidance on, the monitoring of network topology, security, operations and processes, so that Ofcom's security regulation is effective, appropriate and measurable. The role will primarily be assigned to one of these regimes based on candidate experience but will provide assistance across other areas as required. To provide cyber security technical expertise across the regulatory regimes implemented by the Network Security team Support the development, roll out, management and monitoring of a programme promoting compliance with the new legislation in the Telecoms Security Bill and associated guidance. This includes designing and operating a compliance monitoring regime, and contribuitng to producing an annual report for the SOS (Secretary of State) for DCMS (Department of Culture, Media and Sport) on compliance levels across the sector. Work with other members of the team in assessing any compliance implications arising from security and resilience breaches that are reported to Ofcom by regulated companies. Support the management of a threat intelligence lead vulnerability testing scheme that has been introduced across the major Communications Provider community. This will include, working with stakeholders in scoping, agreeing, and managing the testing, and monitoring progress against a remedial action plan of vulnerability tests. Work closely with NCSC in their role as the UK's cyber security technical lead, DCMS, and other regulators. Work with colleagues in Enforcement and Legal teams in Ofcom to provide technical support in relation to any compliance enforcement activity. Work with industry stakeholders, Government and other relevant agencies to ensure policy goals are aligned and effectively coordinated. Good experience and understanding of conducting security assurance assessments or audits, and subsequent management of remediation plans, within the telecoms or the digital infrastructure sectors. Sound understanding of the types of threat actors that would target Ofcom's regulated sectors and security threats they present. Comprehensive experience in evaluating technical security vulnerabilities and identifying reasonable and appropriate control measures. Broad experience across all cyber security risk management domains (strategy, governance and risk management, protection, detection, response, recovery and resumption of services, situational awareness, testing). Understanding of network topologies including fixed, mobile, and digital infrastructure such as DNS and domain name registry services, and internet exchange points. Experience in practical application of cyber standards and guidance, such as 10 Steps to Cyber Security, NIST etc. Maintaining an ongoing awareness and understanding of emerging telecoms or digital infrastructure technologies, including via training, industry liaison and identifying, commissioning and managing specific external technical research projects. Excellent communication skills including clear and effective presentation skills to both internal and external audiences. Preferably educated to degree level (or equivalent). Relevant professional security qualifications, such as such as CiSP or CISM. Willing to obtain security clearance to "SC" level. Experience of project management including developing and delivering against plans, managing risks and issues along the way. Good experience and solid understanding in at least one of the following technical areas: Virtualisation of telecoms networks functions Telecoms signalling systems Supply chain management and vendor contractual arrangements Third party network access User identity management Asset management Auditing and testing Knowledge of the regulatory environment. Experience in working in a communications provider, digital infrastructure operator, or a technology-based consultancy. Diversity and Inclusion Ofcom is a forward-thinking, inclusive employer and recognises the value of diversity to truly "make communications work for everyone". Here at Ofcom, our vision is to ensure people are part of an environment when they can truly strive and be themselves, therefore we aim to recruit from the widest pool of candidates possible - irrespective of social background, ethnicity, sexual orientation, gender or disability. We are an organisation that strives to be truly representative of the whole of the UK and our aim is to be an employer of choice for everyone.

Ofcom looks after communications in the UK. From phones and broadband to TV, radio, post and wireless devices, we regulate services at the heart of people's everyday lives. This is an exciting time for this work area within Ofcom. We are delivering vital work to help shape the communications services today and tomorrow. One of Ofcom's priorities is enabling strong, secure networks. The safety and security of the UK's communications networks are vitally important. We aim to deliver this by working closely with Government, National Cyber Security Centre and industry. In addition to the telecoms sector, Ofcom has new responsibilities under NIS for the "Digital Infrastructure subsector". This includes companies providing essential services in the following areas: DNS resolution and authoritative hosting TLD name registries Internet Exchange Points The Network Security team is responsible for delivering against these important priority areas for Ofcom. Working closely with other members of the Network Security team, this role is responsible for working across the various cyber security regulatory regimes implemented by the team. This includes: Telecoms sector (Telecoms Security Bill) Digital Infrastructure industry (Network and Information Systems Regulations - NIS) TBEST - Ofcom led penetration tests being carried out across telecoms and NIS companies. The successful candidate will demonstrate technical insights, help develop and implement guidance on, the monitoring of network topology, security, operations and processes, so that Ofcom's security regulation is effective, appropriate and measurable. The role will primarily be assigned to one of these regimes based on candidate experience but will provide assistance across other areas as required. To provide cyber security technical expertise across the regulatory regimes implemented by the Network Security team Support the development, roll out, management and monitoring of a programme promoting compliance with the new legislation in the Telecoms Security Bill and associated guidance. This includes designing and operating a compliance monitoring regime, and contribuitng to producing an annual report for the SOS (Secretary of State) for DCMS (Department of Culture, Media and Sport) on compliance levels across the sector. Work with other members of the team in assessing any compliance implications arising from security and resilience breaches that are reported to Ofcom by regulated companies. Support the management of a threat intelligence lead vulnerability testing scheme that has been introduced across the major Communications Provider community. This will include, working with stakeholders in scoping, agreeing, and managing the testing, and monitoring progress against a remedial action plan of vulnerability tests. Work closely with NCSC in their role as the UK's cyber security technical lead, DCMS, and other regulators. Work with colleagues in Enforcement and Legal teams in Ofcom to provide technical support in relation to any compliance enforcement activity. Work with industry stakeholders, Government and other relevant agencies to ensure policy goals are aligned and effectively coordinated. Good experience and understanding of conducting security assurance assessments or audits, and subsequent management of remediation plans, within the telecoms or the digital infrastructure sectors. Sound understanding of the types of threat actors that would target Ofcom's regulated sectors and security threats they present. Comprehensive experience in evaluating technical security vulnerabilities and identifying reasonable and appropriate control measures. Broad experience across all cyber security risk management domains (strategy, governance and risk management, protection, detection, response, recovery and resumption of services, situational awareness, testing). Understanding of network topologies including fixed, mobile, and digital infrastructure such as DNS and domain name registry services, and internet exchange points. Experience in practical application of cyber standards and guidance, such as 10 Steps to Cyber Security, NIST etc. Maintaining an ongoing awareness and understanding of emerging telecoms or digital infrastructure technologies, including via training, industry liaison and identifying, commissioning and managing specific external technical research projects. Excellent communication skills including clear and effective presentation skills to both internal and external audiences. Preferably educated to degree level (or equivalent). Relevant professional security qualifications, such as such as CiSP or CISM. Willing to obtain security clearance to "SC" level. Experience of project management including developing and delivering against plans, managing risks and issues along the way. Good experience and solid understanding in at least one of the following technical areas: Virtualisation of telecoms networks functions Telecoms signalling systems Supply chain management and vendor contractual arrangements Third party network access User identity management Asset management Auditing and testing Knowledge of the regulatory environment. Experience in working in a communications provider, digital infrastructure operator, or a technology-based consultancy. Diversity and Inclusion Ofcom is a forward-thinking, inclusive employer and recognises the value of diversity to truly "make communications work for everyone". Here at Ofcom, our vision is to ensure people are part of an environment when they can truly strive and be themselves, therefore we aim to recruit from the widest pool of candidates possible - irrespective of social background, ethnicity, sexual orientation, gender or disability. We are an organisation that strives to be truly representative of the whole of the UK and our aim is to be an employer of choice for everyone.

Ofcom looks after communications in the UK. From phones and broadband to TV, radio, post and wireless devices, we regulate services at the heart of people's everyday lives. This is an exciting time for this work area within Ofcom. We are delivering vital work to help shape the communications services today and tomorrow. One of Ofcom's priorities is enabling strong, secure networks. The safety and security of the UK's communications networks are vitally important. We aim to deliver this by working closely with Government, National Cyber Security Centre and industry. In addition to the telecoms sector, Ofcom has new responsibilities under NIS for the "Digital Infrastructure subsector". This includes companies providing essential services in the following areas: DNS resolution and authoritative hosting TLD name registries Internet Exchange Points The Network Security team is responsible for delivering against these important priority areas for Ofcom. Working closely with other members of the Network Security team, this role is responsible for working across the various cyber security regulatory regimes implemented by the team. This includes: Telecoms sector (Telecoms Security Bill) Digital Infrastructure industry (Network and Information Systems Regulations - NIS) TBEST - Ofcom led penetration tests being carried out across telecoms and NIS companies. The successful candidate will demonstrate technical insights, help develop and implement guidance on, the monitoring of network topology, security, operations and processes, so that Ofcom's security regulation is effective, appropriate and measurable. The role will primarily be assigned to one of these regimes based on candidate experience but will provide assistance across other areas as required. To provide cyber security technical expertise across the regulatory regimes implemented by the Network Security team Support the development, roll out, management and monitoring of a programme promoting compliance with the new legislation in the Telecoms Security Bill and associated guidance. This includes designing and operating a compliance monitoring regime, and contribuitng to producing an annual report for the SOS (Secretary of State) for DCMS (Department of Culture, Media and Sport) on compliance levels across the sector. Work with other members of the team in assessing any compliance implications arising from security and resilience breaches that are reported to Ofcom by regulated companies. Support the management of a threat intelligence lead vulnerability testing scheme that has been introduced across the major Communications Provider community. This will include, working with stakeholders in scoping, agreeing, and managing the testing, and monitoring progress against a remedial action plan of vulnerability tests. Work closely with NCSC in their role as the UK's cyber security technical lead, DCMS, and other regulators. Work with colleagues in Enforcement and Legal teams in Ofcom to provide technical support in relation to any compliance enforcement activity. Work with industry stakeholders, Government and other relevant agencies to ensure policy goals are aligned and effectively coordinated. Good experience and understanding of conducting security assurance assessments or audits, and subsequent management of remediation plans, within the telecoms or the digital infrastructure sectors. Sound understanding of the types of threat actors that would target Ofcom's regulated sectors and security threats they present. Comprehensive experience in evaluating technical security vulnerabilities and identifying reasonable and appropriate control measures. Broad experience across all cyber security risk management domains (strategy, governance and risk management, protection, detection, response, recovery and resumption of services, situational awareness, testing). Understanding of network topologies including fixed, mobile, and digital infrastructure such as DNS and domain name registry services, and internet exchange points. Experience in practical application of cyber standards and guidance, such as 10 Steps to Cyber Security, NIST etc. Maintaining an ongoing awareness and understanding of emerging telecoms or digital infrastructure technologies, including via training, industry liaison and identifying, commissioning and managing specific external technical research projects. Excellent communication skills including clear and effective presentation skills to both internal and external audiences. Preferably educated to degree level (or equivalent). Relevant professional security qualifications, such as such as CiSP or CISM. Willing to obtain security clearance to "SC" level. Experience of project management including developing and delivering against plans, managing risks and issues along the way. Good experience and solid understanding in at least one of the following technical areas: Virtualisation of telecoms networks functions Telecoms signalling systems Supply chain management and vendor contractual arrangements Third party network access User identity management Asset management Auditing and testing Knowledge of the regulatory environment. Experience in working in a communications provider, digital infrastructure operator, or a technology-based consultancy. Diversity and Inclusion Ofcom is a forward-thinking, inclusive employer and recognises the value of diversity to truly "make communications work for everyone". Here at Ofcom, our vision is to ensure people are part of an environment when they can truly strive and be themselves, therefore we aim to recruit from the widest pool of candidates possible - irrespective of social background, ethnicity, sexual orientation, gender or disability. We are an organisation that strives to be truly representative of the whole of the UK and our aim is to be an employer of choice for everyone.

Ofcom looks after communications in the UK. From phones and broadband to TV, radio, post and wireless devices, we regulate services at the heart of people's everyday lives. This is an exciting time for this work area within Ofcom. We are delivering vital work to help shape the communications services today and tomorrow. One of Ofcom's priorities is enabling strong, secure networks. The safety and security of the UK's communications networks are vitally important. We aim to deliver this by working closely with Government, National Cyber Security Centre and industry. In addition to the telecoms sector, Ofcom has new responsibilities under NIS for the "Digital Infrastructure subsector". This includes companies providing essential services in the following areas: DNS resolution and authoritative hosting TLD name registries Internet Exchange Points The Network Security team is responsible for delivering against these important priority areas for Ofcom. Working closely with other members of the Network Security team, this role is responsible for working across the various cyber security regulatory regimes implemented by the team. This includes: Telecoms sector (Telecoms Security Bill) Digital Infrastructure industry (Network and Information Systems Regulations - NIS) TBEST - Ofcom led penetration tests being carried out across telecoms and NIS companies. The successful candidate will demonstrate technical insights, help develop and implement guidance on, the monitoring of network topology, security, operations and processes, so that Ofcom's security regulation is effective, appropriate and measurable. The role will primarily be assigned to one of these regimes based on candidate experience but will provide assistance across other areas as required. To provide cyber security technical expertise across the regulatory regimes implemented by the Network Security team Support the development, roll out, management and monitoring of a programme promoting compliance with the new legislation in the Telecoms Security Bill and associated guidance. This includes designing and operating a compliance monitoring regime, and contribuitng to producing an annual report for the SOS (Secretary of State) for DCMS (Department of Culture, Media and Sport) on compliance levels across the sector. Work with other members of the team in assessing any compliance implications arising from security and resilience breaches that are reported to Ofcom by regulated companies. Support the management of a threat intelligence lead vulnerability testing scheme that has been introduced across the major Communications Provider community. This will include, working with stakeholders in scoping, agreeing, and managing the testing, and monitoring progress against a remedial action plan of vulnerability tests. Work closely with NCSC in their role as the UK's cyber security technical lead, DCMS, and other regulators. Work with colleagues in Enforcement and Legal teams in Ofcom to provide technical support in relation to any compliance enforcement activity. Work with industry stakeholders, Government and other relevant agencies to ensure policy goals are aligned and effectively coordinated. Good experience and understanding of conducting security assurance assessments or audits, and subsequent management of remediation plans, within the telecoms or the digital infrastructure sectors. Sound understanding of the types of threat actors that would target Ofcom's regulated sectors and security threats they present. Comprehensive experience in evaluating technical security vulnerabilities and identifying reasonable and appropriate control measures. Broad experience across all cyber security risk management domains (strategy, governance and risk management, protection, detection, response, recovery and resumption of services, situational awareness, testing). Understanding of network topologies including fixed, mobile, and digital infrastructure such as DNS and domain name registry services, and internet exchange points. Experience in practical application of cyber standards and guidance, such as 10 Steps to Cyber Security, NIST etc. Maintaining an ongoing awareness and understanding of emerging telecoms or digital infrastructure technologies, including via training, industry liaison and identifying, commissioning and managing specific external technical research projects. Excellent communication skills including clear and effective presentation skills to both internal and external audiences. Preferably educated to degree level (or equivalent). Relevant professional security qualifications, such as such as CiSP or CISM. Willing to obtain security clearance to "SC" level. Experience of project management including developing and delivering against plans, managing risks and issues along the way. Good experience and solid understanding in at least one of the following technical areas: Virtualisation of telecoms networks functions Telecoms signalling systems Supply chain management and vendor contractual arrangements Third party network access User identity management Asset management Auditing and testing Knowledge of the regulatory environment. Experience in working in a communications provider, digital infrastructure operator, or a technology-based consultancy. Diversity and Inclusion Ofcom is a forward-thinking, inclusive employer and recognises the value of diversity to truly "make communications work for everyone". Here at Ofcom, our vision is to ensure people are part of an environment when they can truly strive and be themselves, therefore we aim to recruit from the widest pool of candidates possible - irrespective of social background, ethnicity, sexual orientation, gender or disability. We are an organisation that strives to be truly representative of the whole of the UK and our aim is to be an employer of choice for everyone.

Ofcom looks after communications in the UK. From phones and broadband to TV, radio, post and wireless devices, we regulate services at the heart of people's everyday lives. This is an exciting time for this work area within Ofcom. We are delivering vital work to help shape the communications services today and tomorrow. One of Ofcom's priorities is enabling strong, secure networks. The safety and security of the UK's communications networks are vitally important. We aim to deliver this by working closely with Government, National Cyber Security Centre and industry. In addition to the telecoms sector, Ofcom has new responsibilities under NIS for the "Digital Infrastructure subsector". This includes companies providing essential services in the following areas: DNS resolution and authoritative hosting TLD name registries Internet Exchange Points The Network Security team is responsible for delivering against these important priority areas for Ofcom. Working closely with other members of the Network Security team, this role is responsible for working across the various cyber security regulatory regimes implemented by the team. This includes: Telecoms sector (Telecoms Security Bill) Digital Infrastructure industry (Network and Information Systems Regulations - NIS) TBEST - Ofcom led penetration tests being carried out across telecoms and NIS companies. The successful candidate will demonstrate technical insights, help develop and implement guidance on, the monitoring of network topology, security, operations and processes, so that Ofcom's security regulation is effective, appropriate and measurable. The role will primarily be assigned to one of these regimes based on candidate experience but will provide assistance across other areas as required. To provide cyber security technical expertise across the regulatory regimes implemented by the Network Security team Support the development, roll out, management and monitoring of a programme promoting compliance with the new legislation in the Telecoms Security Bill and associated guidance. This includes designing and operating a compliance monitoring regime, and contribuitng to producing an annual report for the SOS (Secretary of State) for DCMS (Department of Culture, Media and Sport) on compliance levels across the sector. Work with other members of the team in assessing any compliance implications arising from security and resilience breaches that are reported to Ofcom by regulated companies. Support the management of a threat intelligence lead vulnerability testing scheme that has been introduced across the major Communications Provider community. This will include, working with stakeholders in scoping, agreeing, and managing the testing, and monitoring progress against a remedial action plan of vulnerability tests. Work closely with NCSC in their role as the UK's cyber security technical lead, DCMS, and other regulators. Work with colleagues in Enforcement and Legal teams in Ofcom to provide technical support in relation to any compliance enforcement activity. Work with industry stakeholders, Government and other relevant agencies to ensure policy goals are aligned and effectively coordinated. Good experience and understanding of conducting security assurance assessments or audits, and subsequent management of remediation plans, within the telecoms or the digital infrastructure sectors. Sound understanding of the types of threat actors that would target Ofcom's regulated sectors and security threats they present. Comprehensive experience in evaluating technical security vulnerabilities and identifying reasonable and appropriate control measures. Broad experience across all cyber security risk management domains (strategy, governance and risk management, protection, detection, response, recovery and resumption of services, situational awareness, testing). Understanding of network topologies including fixed, mobile, and digital infrastructure such as DNS and domain name registry services, and internet exchange points. Experience in practical application of cyber standards and guidance, such as 10 Steps to Cyber Security, NIST etc. Maintaining an ongoing awareness and understanding of emerging telecoms or digital infrastructure technologies, including via training, industry liaison and identifying, commissioning and managing specific external technical research projects. Excellent communication skills including clear and effective presentation skills to both internal and external audiences. Preferably educated to degree level (or equivalent). Relevant professional security qualifications, such as such as CiSP or CISM. Willing to obtain security clearance to "SC" level. Experience of project management including developing and delivering against plans, managing risks and issues along the way. Good experience and solid understanding in at least one of the following technical areas: Virtualisation of telecoms networks functions Telecoms signalling systems Supply chain management and vendor contractual arrangements Third party network access User identity management Asset management Auditing and testing Knowledge of the regulatory environment. Experience in working in a communications provider, digital infrastructure operator, or a technology-based consultancy. Diversity and Inclusion Ofcom is a forward-thinking, inclusive employer and recognises the value of diversity to truly "make communications work for everyone". Here at Ofcom, our vision is to ensure people are part of an environment when they can truly strive and be themselves, therefore we aim to recruit from the widest pool of candidates possible - irrespective of social background, ethnicity, sexual orientation, gender or disability. We are an organisation that strives to be truly representative of the whole of the UK and our aim is to be an employer of choice for everyone.

Ofcom looks after communications in the UK. From phones and broadband to TV, radio, post and wireless devices, we regulate services at the heart of people's everyday lives. This is an exciting time for this work area within Ofcom. We are delivering vital work to help shape the communications services today and tomorrow. One of Ofcom's priorities is enabling strong, secure networks. The safety and security of the UK's communications networks are vitally important. We aim to deliver this by working closely with Government, National Cyber Security Centre and industry. In addition to the telecoms sector, Ofcom has new responsibilities under NIS for the "Digital Infrastructure subsector". This includes companies providing essential services in the following areas: DNS resolution and authoritative hosting TLD name registries Internet Exchange Points The Network Security team is responsible for delivering against these important priority areas for Ofcom. Working closely with other members of the Network Security team, this role is responsible for working across the various cyber security regulatory regimes implemented by the team. This includes: Telecoms sector (Telecoms Security Bill) Digital Infrastructure industry (Network and Information Systems Regulations - NIS) TBEST - Ofcom led penetration tests being carried out across telecoms and NIS companies. The successful candidate will demonstrate technical insights, help develop and implement guidance on, the monitoring of network topology, security, operations and processes, so that Ofcom's security regulation is effective, appropriate and measurable. The role will primarily be assigned to one of these regimes based on candidate experience but will provide assistance across other areas as required. To provide cyber security technical expertise across the regulatory regimes implemented by the Network Security team Support the development, roll out, management and monitoring of a programme promoting compliance with the new legislation in the Telecoms Security Bill and associated guidance. This includes designing and operating a compliance monitoring regime, and contribuitng to producing an annual report for the SOS (Secretary of State) for DCMS (Department of Culture, Media and Sport) on compliance levels across the sector. Work with other members of the team in assessing any compliance implications arising from security and resilience breaches that are reported to Ofcom by regulated companies. Support the management of a threat intelligence lead vulnerability testing scheme that has been introduced across the major Communications Provider community. This will include, working with stakeholders in scoping, agreeing, and managing the testing, and monitoring progress against a remedial action plan of vulnerability tests. Work closely with NCSC in their role as the UK's cyber security technical lead, DCMS, and other regulators. Work with colleagues in Enforcement and Legal teams in Ofcom to provide technical support in relation to any compliance enforcement activity. Work with industry stakeholders, Government and other relevant agencies to ensure policy goals are aligned and effectively coordinated. Good experience and understanding of conducting security assurance assessments or audits, and subsequent management of remediation plans, within the telecoms or the digital infrastructure sectors. Sound understanding of the types of threat actors that would target Ofcom's regulated sectors and security threats they present. Comprehensive experience in evaluating technical security vulnerabilities and identifying reasonable and appropriate control measures. Broad experience across all cyber security risk management domains (strategy, governance and risk management, protection, detection, response, recovery and resumption of services, situational awareness, testing). Understanding of network topologies including fixed, mobile, and digital infrastructure such as DNS and domain name registry services, and internet exchange points. Experience in practical application of cyber standards and guidance, such as 10 Steps to Cyber Security, NIST etc. Maintaining an ongoing awareness and understanding of emerging telecoms or digital infrastructure technologies, including via training, industry liaison and identifying, commissioning and managing specific external technical research projects. Excellent communication skills including clear and effective presentation skills to both internal and external audiences. Preferably educated to degree level (or equivalent). Relevant professional security qualifications, such as such as CiSP or CISM. Willing to obtain security clearance to "SC" level. Experience of project management including developing and delivering against plans, managing risks and issues along the way. Good experience and solid understanding in at least one of the following technical areas: Virtualisation of telecoms networks functions Telecoms signalling systems Supply chain management and vendor contractual arrangements Third party network access User identity management Asset management Auditing and testing Knowledge of the regulatory environment. Experience in working in a communications provider, digital infrastructure operator, or a technology-based consultancy. Diversity and Inclusion Ofcom is a forward-thinking, inclusive employer and recognises the value of diversity to truly "make communications work for everyone". Here at Ofcom, our vision is to ensure people are part of an environment when they can truly strive and be themselves, therefore we aim to recruit from the widest pool of candidates possible - irrespective of social background, ethnicity, sexual orientation, gender or disability. We are an organisation that strives to be truly representative of the whole of the UK and our aim is to be an employer of choice for everyone.

Ofcom looks after communications in the UK. From phones and broadband to TV, radio, post and wireless devices, we regulate services at the heart of people's everyday lives. This is an exciting time for this work area within Ofcom. We are delivering vital work to help shape the communications services today and tomorrow. One of Ofcom's priorities is enabling strong, secure networks. The safety and security of the UK's communications networks are vitally important. We aim to deliver this by working closely with Government, National Cyber Security Centre and industry. In addition to the telecoms sector, Ofcom has new responsibilities under NIS for the "Digital Infrastructure subsector". This includes companies providing essential services in the following areas: DNS resolution and authoritative hosting TLD name registries Internet Exchange Points The Network Security team is responsible for delivering against these important priority areas for Ofcom. Working closely with other members of the Network Security team, this role is responsible for working across the various cyber security regulatory regimes implemented by the team. This includes: Telecoms sector (Telecoms Security Bill) Digital Infrastructure industry (Network and Information Systems Regulations - NIS) TBEST - Ofcom led penetration tests being carried out across telecoms and NIS companies. The successful candidate will demonstrate technical insights, help develop and implement guidance on, the monitoring of network topology, security, operations and processes, so that Ofcom's security regulation is effective, appropriate and measurable. The role will primarily be assigned to one of these regimes based on candidate experience but will provide assistance across other areas as required. To provide cyber security technical expertise across the regulatory regimes implemented by the Network Security team Support the development, roll out, management and monitoring of a programme promoting compliance with the new legislation in the Telecoms Security Bill and associated guidance. This includes designing and operating a compliance monitoring regime, and contribuitng to producing an annual report for the SOS (Secretary of State) for DCMS (Department of Culture, Media and Sport) on compliance levels across the sector. Work with other members of the team in assessing any compliance implications arising from security and resilience breaches that are reported to Ofcom by regulated companies. Support the management of a threat intelligence lead vulnerability testing scheme that has been introduced across the major Communications Provider community. This will include, working with stakeholders in scoping, agreeing, and managing the testing, and monitoring progress against a remedial action plan of vulnerability tests. Work closely with NCSC in their role as the UK's cyber security technical lead, DCMS, and other regulators. Work with colleagues in Enforcement and Legal teams in Ofcom to provide technical support in relation to any compliance enforcement activity. Work with industry stakeholders, Government and other relevant agencies to ensure policy goals are aligned and effectively coordinated. Good experience and understanding of conducting security assurance assessments or audits, and subsequent management of remediation plans, within the telecoms or the digital infrastructure sectors. Sound understanding of the types of threat actors that would target Ofcom's regulated sectors and security threats they present. Comprehensive experience in evaluating technical security vulnerabilities and identifying reasonable and appropriate control measures. Broad experience across all cyber security risk management domains (strategy, governance and risk management, protection, detection, response, recovery and resumption of services, situational awareness, testing). Understanding of network topologies including fixed, mobile, and digital infrastructure such as DNS and domain name registry services, and internet exchange points. Experience in practical application of cyber standards and guidance, such as 10 Steps to Cyber Security, NIST etc. Maintaining an ongoing awareness and understanding of emerging telecoms or digital infrastructure technologies, including via training, industry liaison and identifying, commissioning and managing specific external technical research projects. Excellent communication skills including clear and effective presentation skills to both internal and external audiences. Preferably educated to degree level (or equivalent). Relevant professional security qualifications, such as such as CiSP or CISM. Willing to obtain security clearance to "SC" level. Experience of project management including developing and delivering against plans, managing risks and issues along the way. Good experience and solid understanding in at least one of the following technical areas: Virtualisation of telecoms networks functions Telecoms signalling systems Supply chain management and vendor contractual arrangements Third party network access User identity management Asset management Auditing and testing Knowledge of the regulatory environment. Experience in working in a communications provider, digital infrastructure operator, or a technology-based consultancy. Diversity and Inclusion Ofcom is a forward-thinking, inclusive employer and recognises the value of diversity to truly "make communications work for everyone". Here at Ofcom, our vision is to ensure people are part of an environment when they can truly strive and be themselves, therefore we aim to recruit from the widest pool of candidates possible - irrespective of social background, ethnicity, sexual orientation, gender or disability. We are an organisation that strives to be truly representative of the whole of the UK and our aim is to be an employer of choice for everyone.

Ofcom looks after communications in the UK. From phones and broadband to TV, radio, post and wireless devices, we regulate services at the heart of people's everyday lives. This is an exciting time for this work area within Ofcom. We are delivering vital work to help shape the communications services today and tomorrow. One of Ofcom's priorities is enabling strong, secure networks. The safety and security of the UK's communications networks are vitally important. We aim to deliver this by working closely with Government, National Cyber Security Centre and industry. In addition to the telecoms sector, Ofcom has new responsibilities under NIS for the "Digital Infrastructure subsector". This includes companies providing essential services in the following areas: DNS resolution and authoritative hosting TLD name registries Internet Exchange Points The Network Security team is responsible for delivering against these important priority areas for Ofcom. Working closely with other members of the Network Security team, this role is responsible for working across the various cyber security regulatory regimes implemented by the team. This includes: Telecoms sector (Telecoms Security Bill) Digital Infrastructure industry (Network and Information Systems Regulations - NIS) TBEST - Ofcom led penetration tests being carried out across telecoms and NIS companies. The successful candidate will demonstrate technical insights, help develop and implement guidance on, the monitoring of network topology, security, operations and processes, so that Ofcom's security regulation is effective, appropriate and measurable. The role will primarily be assigned to one of these regimes based on candidate experience but will provide assistance across other areas as required. To provide cyber security technical expertise across the regulatory regimes implemented by the Network Security team Support the development, roll out, management and monitoring of a programme promoting compliance with the new legislation in the Telecoms Security Bill and associated guidance. This includes designing and operating a compliance monitoring regime, and contribuitng to producing an annual report for the SOS (Secretary of State) for DCMS (Department of Culture, Media and Sport) on compliance levels across the sector. Work with other members of the team in assessing any compliance implications arising from security and resilience breaches that are reported to Ofcom by regulated companies. Support the management of a threat intelligence lead vulnerability testing scheme that has been introduced across the major Communications Provider community. This will include, working with stakeholders in scoping, agreeing, and managing the testing, and monitoring progress against a remedial action plan of vulnerability tests. Work closely with NCSC in their role as the UK's cyber security technical lead, DCMS, and other regulators. Work with colleagues in Enforcement and Legal teams in Ofcom to provide technical support in relation to any compliance enforcement activity. Work with industry stakeholders, Government and other relevant agencies to ensure policy goals are aligned and effectively coordinated. Good experience and understanding of conducting security assurance assessments or audits, and subsequent management of remediation plans, within the telecoms or the digital infrastructure sectors. Sound understanding of the types of threat actors that would target Ofcom's regulated sectors and security threats they present. Comprehensive experience in evaluating technical security vulnerabilities and identifying reasonable and appropriate control measures. Broad experience across all cyber security risk management domains (strategy, governance and risk management, protection, detection, response, recovery and resumption of services, situational awareness, testing). Understanding of network topologies including fixed, mobile, and digital infrastructure such as DNS and domain name registry services, and internet exchange points. Experience in practical application of cyber standards and guidance, such as 10 Steps to Cyber Security, NIST etc. Maintaining an ongoing awareness and understanding of emerging telecoms or digital infrastructure technologies, including via training, industry liaison and identifying, commissioning and managing specific external technical research projects. Excellent communication skills including clear and effective presentation skills to both internal and external audiences. Preferably educated to degree level (or equivalent). Relevant professional security qualifications, such as such as CiSP or CISM. Willing to obtain security clearance to "SC" level. Experience of project management including developing and delivering against plans, managing risks and issues along the way. Good experience and solid understanding in at least one of the following technical areas: Virtualisation of telecoms networks functions Telecoms signalling systems Supply chain management and vendor contractual arrangements Third party network access User identity management Asset management Auditing and testing Knowledge of the regulatory environment. Experience in working in a communications provider, digital infrastructure operator, or a technology-based consultancy. Diversity and Inclusion Ofcom is a forward-thinking, inclusive employer and recognises the value of diversity to truly "make communications work for everyone". Here at Ofcom, our vision is to ensure people are part of an environment when they can truly strive and be themselves, therefore we aim to recruit from the widest pool of candidates possible - irrespective of social background, ethnicity, sexual orientation, gender or disability. We are an organisation that strives to be truly representative of the whole of the UK and our aim is to be an employer of choice for everyone.

Ofcom looks after communications in the UK. From phones and broadband to TV, radio, post and wireless devices, we regulate services at the heart of people's everyday lives. This is an exciting time for this work area within Ofcom. We are delivering vital work to help shape the communications services today and tomorrow. One of Ofcom's priorities is enabling strong, secure networks. The safety and security of the UK's communications networks are vitally important. We aim to deliver this by working closely with Government, National Cyber Security Centre and industry. In addition to the telecoms sector, Ofcom has new responsibilities under NIS for the "Digital Infrastructure subsector". This includes companies providing essential services in the following areas: DNS resolution and authoritative hosting TLD name registries Internet Exchange Points The Network Security team is responsible for delivering against these important priority areas for Ofcom. Working closely with other members of the Network Security team, this role is responsible for working across the various cyber security regulatory regimes implemented by the team. This includes: Telecoms sector (Telecoms Security Bill) Digital Infrastructure industry (Network and Information Systems Regulations - NIS) TBEST - Ofcom led penetration tests being carried out across telecoms and NIS companies. The successful candidate will demonstrate technical insights, help develop and implement guidance on, the monitoring of network topology, security, operations and processes, so that Ofcom's security regulation is effective, appropriate and measurable. The role will primarily be assigned to one of these regimes based on candidate experience but will provide assistance across other areas as required. To provide cyber security technical expertise across the regulatory regimes implemented by the Network Security team Support the development, roll out, management and monitoring of a programme promoting compliance with the new legislation in the Telecoms Security Bill and associated guidance. This includes designing and operating a compliance monitoring regime, and contribuitng to producing an annual report for the SOS (Secretary of State) for DCMS (Department of Culture, Media and Sport) on compliance levels across the sector. Work with other members of the team in assessing any compliance implications arising from security and resilience breaches that are reported to Ofcom by regulated companies. Support the management of a threat intelligence lead vulnerability testing scheme that has been introduced across the major Communications Provider community. This will include, working with stakeholders in scoping, agreeing, and managing the testing, and monitoring progress against a remedial action plan of vulnerability tests. Work closely with NCSC in their role as the UK's cyber security technical lead, DCMS, and other regulators. Work with colleagues in Enforcement and Legal teams in Ofcom to provide technical support in relation to any compliance enforcement activity. Work with industry stakeholders, Government and other relevant agencies to ensure policy goals are aligned and effectively coordinated. Good experience and understanding of conducting security assurance assessments or audits, and subsequent management of remediation plans, within the telecoms or the digital infrastructure sectors. Sound understanding of the types of threat actors that would target Ofcom's regulated sectors and security threats they present. Comprehensive experience in evaluating technical security vulnerabilities and identifying reasonable and appropriate control measures. Broad experience across all cyber security risk management domains (strategy, governance and risk management, protection, detection, response, recovery and resumption of services, situational awareness, testing). Understanding of network topologies including fixed, mobile, and digital infrastructure such as DNS and domain name registry services, and internet exchange points. Experience in practical application of cyber standards and guidance, such as 10 Steps to Cyber Security, NIST etc. Maintaining an ongoing awareness and understanding of emerging telecoms or digital infrastructure technologies, including via training, industry liaison and identifying, commissioning and managing specific external technical research projects. Excellent communication skills including clear and effective presentation skills to both internal and external audiences. Preferably educated to degree level (or equivalent). Relevant professional security qualifications, such as such as CiSP or CISM. Willing to obtain security clearance to "SC" level. Experience of project management including developing and delivering against plans, managing risks and issues along the way. Good experience and solid understanding in at least one of the following technical areas: Virtualisation of telecoms networks functions Telecoms signalling systems Supply chain management and vendor contractual arrangements Third party network access User identity management Asset management Auditing and testing Knowledge of the regulatory environment. Experience in working in a communications provider, digital infrastructure operator, or a technology-based consultancy. Diversity and Inclusion Ofcom is a forward-thinking, inclusive employer and recognises the value of diversity to truly "make communications work for everyone". Here at Ofcom, our vision is to ensure people are part of an environment when they can truly strive and be themselves, therefore we aim to recruit from the widest pool of candidates possible - irrespective of social background, ethnicity, sexual orientation, gender or disability. We are an organisation that strives to be truly representative of the whole of the UK and our aim is to be an employer of choice for everyone.