Chief Information Security Officer

UK Regulators' Network; Glasgow; Hybrid; GBP 120,000 - 180,000; Full time

Job summary

Ofgem, the energy regulator for Great Britain, seeks a Chief Information Security Officer to lead its information security, privacy and resilience strategy. Reporting to the CDIO, you will shape security maturity, manage risk and enable safe service delivery.

You will build trust with colleagues and stakeholders, drive cultural change, and act as an enabler for the organisation. Location options include London, Glasgow or Cardiff with hybrid working.

Qualifications

• Experience leading information security strategy at senior level.
• Proven ability to manage risk and security governance.

Responsibilities

• Define and deliver Ofgem's information and cyber security strategy.
• Lead security resilience, privacy, and incident response.

Job description

About Ofgem

The energy regulator for Great Britain, https://www.ofgem.gov.uk/about-us/working-ofgem

Requirements of the role

The CISO is a strategic leadership role at the heart of Ofgems security, privacy and resilience agenda. Reporting into the CDIO, you will lead the organisation’s cyber and information security capability, setting the direction for a function that enables the business to operate safely, securely and with confidence.

Overview of the Role

As Chief Information Security Officer, you will create the environment and culture that ensures Ofgems can deliver services in a safe and secure way. You will lead the development and delivery of the information and cyber security strategy, shape the organisation’s security maturity, and ensure risk is managed in a balanced and proportionate way.

You will be accountable for building trust with colleagues and stakeholders, re-establishing confidence in the security function and helping create a positive cultural shift across the organisation. This is an opportunity to lead with influence, bring people with you, and be a true enabler for Ofgems.

Key Details

• Location: London, Glasgow, Cardiff
• Contract type: Full time, Permanent
• Profession: Corporate, Cyber Security, Data, Digital, Energy, Regulation, Resilience, Risk, Security, Strategy, Technology
• Working pattern: Flexible working, Hybrid
• Closing Date: 19/10/2026