Chief Information Security Officer

ELEXON; Greater London; Hybrid; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Bonus

Private medical insurance

Generous pension scheme

Job summary

Elexon seeks a Chief Information Security Officer (Grade 15) to join the Digital Directorate. You will shape cyber security, information security, data governance and secure data coordination, reporting to the CDO and CEO, providing independent assurance and strategic risk guidance.

You will lead Information Security, SSES, Data Governance and Data Domain Coordination, guiding risk management, regulatory responses and industry collaboration. Hybrid work with 2 days in London.

Qualifications

• Significant senior leadership experience across information security, cyber security, data governance or enterprise digital risk.
• Experience developing enterprise-wide cyber security, information security and data governance strategies.
• Strong knowledge of security risk management, control frameworks, ISO 27001 and recognised security standards.
• Experience overseeing cyber resilience, incident response, crisis management, security architecture and third-party risk.
• A strong understanding of data governance, data protection, privacy, regulatory compliance and information lifecycle management.
• Experience providing independent governance, risk management and assurance, including challenging senior stakeholders.
• Ability to communicate complex technical and security risks to Executive teams and Boards.
• Strong leadership, budgeting and cross-organisational collaboration skills.
• Experience developing governance frameworks and building relationships across boundaries.

Responsibilities

• Develop and lead Elexon’s cyber security, information security and data governance strategies.
• Provide strategic oversight of cyber resilience, threat management, incident response and business continuity.
• Establish and maintain enterprise-wide security policies, governance frameworks and risk management standards.
• Lead Elexon’s data governance framework, promoting data quality, stewardship, protection, responsible use and lifecycle management.
• Provide executive leadership for Smart Secure Electricity Systems (SSES), overseeing security standards and risk assessments.
• Drive secure data sharing, interoperability and industry data coordination with regulators and market participants.
• Establish governance and assurance for AI and emerging technologies, managing cyber, information and operational risks.
• Advise the CEO, ELT and Board on material security and data risks with clear recommendations.
• Build and develop high-performing teams, budgets, suppliers and resources.
• Represent Elexon externally with Ofgem, DESNZ, NCSC and wider industry stakeholders.

Skills

Information security

Cyber security

Data governance

Enterprise risk

Governance frameworks

Regulatory compliance

Executive communication

Leadership

Job description

We're looking for a Chief Information Security Officer (Grade 15) to join our Digital Directorate at Elexon.

In this senior leadership role, you’ll be responsible for shaping and delivering Elexon’s approach to cyber security, information security, data governance and secure industry data coordination. You’ll provide strategic oversight, manage enterprise-wide risks and ensure our information, systems and data remain secure, resilient and effectively governed.

Reporting to the Chief Digital Officer, with a direct relationship to the Chief Executive Officer, you’ll work closely with the Executive Leadership Team and Board, providing expert advice, independent assurance and constructive challenge on cyber, information and data risks.

You’ll lead teams spanning Information Security, Smart Secure Electricity Systems (SSES), Data Governance and Data Domain Coordination, helping Elexon respond to emerging threats, regulatory developments and the evolving needs of the energy industry.

What you’ll do:

• Develop and lead Elexon’s cyber security, information security and data governance strategies, ensuring alignment with organisational priorities and regulatory requirements.

• Provide strategic oversight of cyber resilience, threat management, incident response and business continuity, ensuring effective controls and assurance arrangements are in place.

• Establish and maintain enterprise-wide security policies, governance frameworks and risk management standards, including independent oversight of control effectiveness.

• Lead Elexon’s data governance framework, promoting data quality, stewardship, protection, responsible use and lifecycle management.

• Provide executive leadership for Smart Secure Electricity Systems (SSES), overseeing security standards, risk assessments and assurance across smart and flexible energy systems.

• Drive secure data sharing, interoperability and industry data coordination, working with regulators, government bodies and energy market participants.

• Establish governance and assurance arrangements for the safe and responsible use of AI and emerging technologies, managing associated cyber, information and operational risks.

• Advise the Chief Executive Officer, Executive Leadership Team and Board on material security and data risks, providing clear recommendations and independent challenge.

• Build and develop high-performing teams, managing budgets, suppliers and resources while promoting accountability, collaboration and continuous improvement.

• Represent Elexon externally, working with Ofgem, DESNZ, NCSC and wider industry stakeholders to influence security, governance and assurance approaches.

What we're looking for:

• Significant senior leadership experience across information security, cyber security, data governance or enterprise digital risk.

• Proven experience developing and implementing enterprise-wide cyber security, information security and data governance strategies.

• Strong knowledge of security risk management, control frameworks, ISO 27001 and recognised security standards.

• Experience overseeing cyber resilience, incident response, crisis management, security architecture and third-party risk.

• A strong understanding of data governance, data protection, privacy, regulatory compliance and information lifecycle management.

• Experience providing independent governance, risk management and assurance, including the ability to challenge and influence senior stakeholders.

• The ability to communicate complex technical and security risks to Executive teams and Boards, translating them into clear business priorities and decisions.

• Strong leadership skills, with experience developing teams, managing budgets and working across complex organisational structures.

• Experience developing governance frameworks and building effective relationships across organisational or industry boundaries.

What's in it for you:

• Salary – Competitive

• Excellent benefits including bonus, private medical insurance and generous pension scheme

• The opportunity to work within a thriving organisation which can support your growth and development

• We operate a hybrid working approach with 2 days in our London office

Our culture

We believe a diverse and inclusive culture allows innovation and creativity to flourish. We are committed to continuously improving our culture for our colleagues and stakeholders. Through our hugely successful Diversity Forum, Mental Health First Aid network and regular programme of activities and events, we celebrate difference and recognise the value of employee wellbeing, which is a consistent outcome from annual employee surveys that we conduct. Likewise, as a community, we like to support each other, and all agree Elexon is a great place to work with a great workspace too!

At Elexon, we want to:

• Provide true equality of opportunity

• Attract and retain diverse talent

• Listen to all voices

• Be representative of the communities we work in

• Be a role model for Diversity and Inclusion in the industry

Elexon together, embracing differences, listening to all voices

Ready to make an impact? Join us and help shape the future of energy services.