Cyber Compliance & Assurance Manager — Flexible First

SSE plc; Glasgow; On-site; GBP 68,000 - 102,000; Full time

Benefits offered by this job

Private healthcare discounts

Gym membership discounts

Free online GP

24/7 counselling

Cycle to Work scheme

Family entitlements

Job summary

SSE plc is seeking an experienced cyber security leader to head regulatory compliance and second line of defence assurance. The role will drive continuous control improvement across priority and high risk cyber security areas, aligning with NIS regulations and industry frameworks.

Based in Glasgow with a flexible first approach, the role includes leading governance, risk assessment, and regulatory submissions, plus coordinating internal and external assurance providers and driving tangible

Qualifications

• Excellent cyber security experience with exposure to IT and OT environments and in-depth knowledge of cyber regulation such as NIS and cybersecurity assurance in the 2nd line.

Responsibilities

• Manage day to day Group leadership of NIS compliance.
• Work with in-scope business units for the NIS Regulations to support governance and risk management processes associated with compliance such as defining scope, assessing risk and monitoring improvement plans.
• Co-ordinate, review and submit annual submissions to regulatory bodies, supporting new requirements and consultations working collaboratively across the Group.
• Develop and manage assurance processes for the cyber security second line of defence that supports regulatory scrutiny and manage internal and externally provided assurance providers including the management of assurance findings.
• Provide leadership and management to identify, prioritise, and implement enhancements across SSE from assurance work into operations and services. Drive improvements through streamlined processes, strengthened controls, and targeted assurance by applying recognised industry frameworks and models to support sustainable transformation.

Skills

Cyber security experience

NIS regulation knowledge

Cybersecurity assurance (2nd line)

IT and OT exposure

Stakeholder communication

Job description

SSE plc is seeking an experienced cyber security leader to head regulatory compliance and second line of defence assurance. The role will drive continuous control improvement across priority and high risk cyber security areas, aligning with NIS regulations and industry frameworks.

Based in Glasgow with a flexible first approach, the role includes leading governance, risk assessment, and regulatory submissions, plus coordinating internal and external assurance providers and driving tangible