Job Vacancy Cyber Security Specialist

As a Cyber Security Specialist, you will play a vital role in safeguarding Natural Resources Wales’ digital infrastructure, systems, and data. You’ll proactively identify, assess, and mitigate cyber threats, helping to ensure the organisation remains resilient in an evolving risk landscape.

This role is central to implementing and maintaining robust cyber security controls, ensuring compliance with key legislation and standards such as NCSC guidance, ISO 27001, and GDPR. You’ll support the delivery of NRW’s cyber resilience strategy by working across the organisation and with external partners to embed secure practices.

You’ll have the autonomy to investigate incidents, assess risks, and respond to security issues affecting DDaT (Digital, Data and Technology) assets and operations. Findings will be reported weekly to the DDaT Security Board, and you’ll be responsible for reviewing and updating the DDaT risk register to reflect emerging threats and mitigation actions.

As an organisation we support flexible working. You will be contracted to either the Bangor or Cardiff NRW office and a suitable hybrid working pattern will be agreed on appointment. Travel between Bangor and Cardiff may be required, any face to face meetings or training will be planned in advance.

To make an informal enquiry about this role, please contact Tracey Gilliland at 

Interviews will be face to face (details of location will be shared in advance)

Due to the nature of the work the successful candidate must be eligible for Security Check (SC) clearance. This generally requires five years’ continuous residency in the UK. Further details on eligibility can be found on  Offers will also be subject to a satisfactory Disclosure and Barring Service Check (DBS) check. Appointments are normally made within 4 to 8 weeks of the closing date.