Location
London

Hours
Full Time, Permanent

Salary
Negotiable

About the Role
Please note that the advert will close at 00:01 on Friday 18 September 2026, so we advise submitting your application by no later than midnight on Thursday 17 September.

As the UK’s communications regulator, Ofcom delivers vital work that keeps the UK connected and shapes the future of communications. Our remit covers phones, broadband, TV, radio, postal services, wireless devices, and the challenge of making the online world safer. We seek people of all backgrounds and experiences to help make communications work for everyone.

The Infrastructure and Connectivity Group aims to advance a better-connected UK, enabling people and businesses to benefit from a digital society. We promote competition and investment, ensure secure and resilient communications networks, and support economic growth through robust infrastructure.

In this role, you will work closely with the Security & Resilience Supervision team to develop and implement regulatory supervision over telecoms providers. You will provide technical expertise on network topology, security, operations, and processes to ensure Ofcom’s regulatory approach under the Telecommunications Security Act (2021) is effective, appropriate, and measurable.

Given the increasing importance of communications security and resilience amid evolving threats and technological changes, this role supports proactive steps to ensure fixed and mobile networks meet user needs and expectations.

Your Key Responsibilities
- Support the development and implementation of a supervisory programme promoting compliance with the Telecommunications Security Act, including maintaining a compliance monitoring regime and reporting annually to the Secretary of State for DSIT.
- Engage with telecoms providers to understand their implementation of security measures.
- Respond to and assess security and resilience incidents reported to Ofcom, ensuring sufficient information for risk assessments.
- Provide technical support to the Enforcement team regarding enforcement activities.
- Collaborate with industry stakeholders, Government, and other agencies to align and coordinate policy goals.
- Assist other Ofcom teams as needed, including policy teams and responsibilities related to Network & Information Systems (NIS) regulation and upcoming remit for Data Centres.

Experience
- Security assurance and risk management experience within telecommunications or related technology environments, including audits, remediation, and assurance monitoring.
- Ability to assess technical vulnerabilities and apply appropriate controls, with exposure to cybersecurity risk management practices such as risk assessments or threat modelling.
- Understanding of vendor risk and broader security considerations, including human and physical aspects.
- Awareness of cybersecurity threats in telecommunications or similar regulated sectors, including evolving threat landscapes.
- Broad familiarity with telecoms technologies such as fixed and mobile networks, signalling (GSM to 5G), and virtualisation, or transferable experience from related domains.
- Strong written and oral communication skills, including presenting to internal and external audiences.
- Project management experience, including developing and delivering plans and managing risks and issues.
- Problem-solving skills to develop practical solutions and keep projects on track.

About you
You are a technically knowledgeable professional with a proactive approach to security and resilience in telecommunications. You can work collaboratively across teams and stakeholders, communicate complex ideas clearly, and adapt to a fast-changing technological and regulatory environment.

Qualifications
- Hold or be prepared to obtain UK Cyber Security Council accreditation.
- Maintain UK security clearance or be willing to undergo vetting checks, as this is a mandatory requirement for the role.