Cyber Compliance & Assurance Manager

SSE plc; Glasgow; On-site; GBP 68,000 - 102,000; Full time

Benefits offered by this job

Private healthcare discounts

Gym membership discounts

Free online GP

24/7 counselling

Cycle to Work scheme

Family entitlements

Job summary

SSE plc is seeking an experienced cyber security leader to head regulatory compliance and second line of defence assurance. The role will drive continuous control improvement across priority and high risk cyber security areas, aligning with NIS regulations and industry frameworks.

Based in Glasgow with a flexible first approach, the role includes leading governance, risk assessment, and regulatory submissions, plus coordinating internal and external assurance providers and driving tangible

Qualifications

• Excellent cyber security experience with exposure to IT and OT environments and in-depth knowledge of cyber regulation such as NIS and cybersecurity assurance in the 2nd line.

Responsibilities

• Manage day to day Group leadership of NIS compliance.
• Work with in-scope business units for the NIS Regulations to support governance and risk management processes associated with compliance such as defining scope, assessing risk and monitoring improvement plans.
• Co-ordinate, review and submit annual submissions to regulatory bodies, supporting new requirements and consultations working collaboratively across the Group.
• Develop and manage assurance processes for the cyber security second line of defence that supports regulatory scrutiny and manage internal and externally provided assurance providers including the management of assurance findings.
• Provide leadership and management to identify, prioritise, and implement enhancements across SSE from assurance work into operations and services. Drive improvements through streamlined processes, strengthened controls, and targeted assurance by applying recognised industry frameworks and models to support sustainable transformation.

Skills

Cyber security experience

NIS regulation knowledge

Cybersecurity assurance (2nd line)

IT and OT exposure

Stakeholder communication

Job description

Base Location:

You’ll be expected to spend 50% of your working week in one of the following locations : Havant, Reading, Perth, Glasgow

Salary:

£68,100 - £102,100 + performance related bonus, car allowance and a range of benefits to support your finances, wellbeing and family.

Working Pattern:

Permanent | Full Time | Flexible First options available

The role

The role holder is responsible for leading SSE's approach to cyber security regulatory compliance and leading cyber security second line of defence assurance. This will support SSE to drive continuous control improvement across all priority and high risk areas of cyber security.

You will

• Manage day to day Group leadership of NIS compliance.


• Work with in-scope business units for the NIS Regulations to support governance and risk management processes associated with compliance such as defining scope, assessing risk and monitoring improvement plans.


• Co-ordinate, review and submit annual submissions to regulatory bodies, supporting new requirements and consultations working collaboratively across the Group.


• Develop and manage assurance processes for the cyber security second line of defence that supports regulatory scrutiny and manage internal and externally provided assurance providers including the management of assurance findings.


• Provide leadership and management to identify, prioritise, and implement enhancements across SSE from assurance work into operations and services. Drive improvements through streamlined processes, strengthened controls, and targeted assurance by applying recognised industry frameworks and models to support sustainable transformation.

You have

• Excellent cyber security experience with exposure to IT and OT environments and in-depth knowledge of cyber regulation such as NIS and cybersecurity assurance in the 2nd line.


• Strong knowledge of risks and threats to UK energy sector and security issues, techniques and implications across digital platforms, control systems and customer data.


• Demonstrable written and verbal communication skills with the ability to interact with SSE staff at all levels up to senior leadership and across all business units and organisations, and to understand business priorities.


• Ability to deliver complex messaging and data in a simple, concise manner..


• Team-oriented interpersonal skills, with the ability to interface effectively with a broad range of people and roles, including IT, OT and business personnel.

About SSE

SSE's purpose is to be restless every day until we make electricity clean, affordable and available for all.

We do this by developing, building, operating and investing in electricity infrastructure and businesses needed in the energy transition. This includes electricity transmission and distribution networks, onshore and offshore wind farms, hydro-electric power and flexible thermal generation. We also provide products and services for businesses and other customers.

Our investment plan will see SSE invest £33bn in critical electricity infrastructure to 2030.

Our IT division powers growth across all SSE business areas by making sure we have the systems, software and security needed to take the lead in a low carbon world. They provide expertise, advice and day-to-day support in emerging technologies, data and analytics, cyber security and more.

Flexible Benefits To Fit Your Life

• Enjoy discounts on private healthcare and gym memberships.


• Wellbeing benefits like a free online GP and 24/7 counselling service.


• Interest-free loans on tech and transport season tickets, or a new bike with our Cycle to Work scheme.


• As well as generous family entitlements such as maternity and adoption pay, and paternity leave.

Work with an equal opportunity employer

SSE will make any reasonable adjustments you need to ensure that your application and experience with us is positive. Please contact [e-mail] / 01738 275846 to discuss how we can support you.

We're dedicated to fostering an open and inclusive workplace where people from all backgrounds can thrive. We create equal opportunities for everyone to succeed and especially welcome applications from those who may not be well represented in our workforce or industry.