Cyber Compliance & Assurance Lead

Scottish and Southern Electricity Networks; Perth; Hybrid; GBP 68,000 - 102,000; Full time

Benefits offered by this job

Discounts on private healthcare

Gym memberships

Free online GP

24/7 counselling service

Cycle to Work scheme

Maternity and adoption pay

Job summary

Scottish and Southern Electricity Networks is recruiting to lead our cyber security regulatory compliance program and our second line of defence assurance. You will drive continuous control improvements across priority cyber security risk areas and coordinate governance with in-scope business units under NIS Regulations.

You will oversee annual regulatory submissions, manage assurance providers, and translate complex security findings into clear actions for senior leadership.

Qualifications

• Excellent cyber security experience with exposure to IT and OT environments and in-depth knowledge of cyber regulation such as NIS and cybersecurity assurance in the 2nd line.
• Strong knowledge of risks and threats to UK energy sector and security issues, techniques and implications across digital platforms, control systems and customer data.
• Demonstrable written and verbal communication skills with the ability to interact with SSE staff at all levels up to senior leadership and across all business units and organisations, and to understand business priorities.
• Ability to deliver complex messaging and data in a simple, concise manner.
• Team-oriented interpersonal skills, with the ability to interface effectively with a broad range of people and roles, including IT, OT and business personnel.

Responsibilities

• Manage day to day Group leadership of NIS compliance.
• Work with in-scope business units for the NIS Regulations to support governance and risk management processes associated with compliance such as defining scope, assessing risk and monitoring improvement plans.
• Co-ordinate, review and submit annual submissions to regulatory bodies, supporting new requirements and consultations working collaboratively across the Group.
• Develop and manage assurance processes for the cyber security second line of defence that supports regulatory scrutiny and manage internal and externally provided assurance providers including the management of assurance findings.
• Provide leadership and management to identify, prioritise, and implement enhancements across SSE from assurance work into operations and services. Drive improvements through streamlined processes, strengthened controls, and targeted assurance by applying recognised industry frameworks and models to support sustainable transformation.

Skills

Cyber security

Regulatory compliance

IT/OT security

Written communication

Verbal communication

Cross-functional collaboration

Job description

Scottish and Southern Electricity Networks is recruiting to lead our cyber security regulatory compliance program and our second line of defence assurance. You will drive continuous control improvements across priority cyber security risk areas and coordinate governance with in-scope business units under NIS Regulations.

You will oversee annual regulatory submissions, manage assurance providers, and translate complex security findings into clear actions for senior leadership.