Cyber Compliance Specialist

SSE PLC; Glasgow; Hybrid; GBP 44,000 - 66,000; Full time

Benefits offered by this job

Private healthcare discounts

Wellbeing support

Cycle to Work

Family leave benefits

Job summary

SSE Renewables is seeking a Cyber Compliance Specialist to develop and assure cyber resilience across its generation assets, including Onshore/Offshore wind, hydro, solar and battery assets. You will implement policies, standards and procedures and support audits and regulator interactions.

Reporting to the OT Resilience manager, you will champion a resilient cyber culture, track compliance gaps, and drive improvements across the fleet with senior stakeholders.

Qualifications

• Experience in assurance or compliance within a technology risk environment.
• Knowledge of SCADA and Operating Technology in contrast with IT.
• Strong analytical skills to collate information from multiple sources.
• Experience with regulatory compliance to NIS and Cyber Assessment Framework (NCSC CAF).
• Effective communication and stakeholder management with clear reporting.

Responsibilities

• Maintain a tracking programme to identify/regulatory, audit and compliance gaps to NIS and related standards.
• Develop and maintain real-time tracking and self-service reporting for CAF compliance.
• Support submissions and presentations to regulators and enable audits.
• Provide interactive reporting to stakeholders and senior leadership to foster cybersecure culture and compliance.
• Enhance OT processes and drive continuous improvement to reduce risk.

Skills

Assurance & compliance

NIS/NCSC CAF knowledge

OT/SCADA familiarity

Regulatory reporting

Stakeholder management

Analytical skills

Job description

Base Location

You'll be expected to spend 50% of your working week in one of the following locations; Eurocentral, Glasgow, Perth

Salary

£44,000 - £65,900 + performance-related bonus and a range of benefits to support your finances, wellbeing and family.

Working Pattern

Permanent | Full Time | Flexible First options available

Security Vetting

Candidates for this role will be required to obtain vetting to SC level through UK Government. The criteria normally includes 5 years UK residency, further information can be found here: United Kingdom Security Vetting: Applicant - GOV.UK ( www.gov.uk )

Candidates for this role will be required to obtain vetting to SC level through UK Government. The criteria normally includes 5 years UK residency, further information can be found here: United Kingdom Security Vetting: Applicant - GOV.UK ( www.gov.uk )

The Role

Reporting to the OT Resilience manager, the Cyber Compliance Specialist will support the development, implementation and assurance of the cybersecurity and resilience management systems to ensure continuous, effective and secure operation of our generating assets, in line with legislation such as the Network & Information Systems Regulations, Grid Code, EU Directive 2022/2555, etc.

Working with colleagues within the OT team, Asset Management and Operations you'll play a key role in setting cyber security and resilience standards for Operating Technologies across SSER's portfolio of Onshore and Offshore Wind, Hydro, Solar and Battery assets and will be critical in ensuring that relevant documented policies, standards and procedures are in place, and implement a robust assurance programme across the fleet.

You Will

• Through regular stakeholder engagement, maintain a tracking programme to identify, manage and address any regulatory, audit and compliance gaps to NIS and other relevant legislation for SSE Renewables.
• Develop and maintain a system for real-time tracking and self-service reporting on the status of compliance to the National Cyber Security Centre's (NCSC) Cyber Assessment Framework (CAF) and other suitable standards across SSE Renewables.
• Support the development of submissions and presentations to regulators, and facilitate the periodic audits and inspections.
• Provide continuous, interactive reporting to stakeholders, and senior leadership to positively influence and build consensus in support of resilient, cybersecure culture and compliance.
• Develop and enhance OT processes and procedures, implementing continuous improvement methodologies to reduce risks and drive efficiency through best practice.

You Have

• Experience in assurance or compliance within a technology risk environment, preferably within the energy or other utility industry.
• Knowledge of SCADA and other Industrial Control Systems in the context of Operating Technology, and a deep understanding of the differences and similarities to conventional IT, capable of developing solutions that are fit for the unique challenges in an always-on, real time, high risk environment.
• Strong analytical skills to collate information from multiple sources and form logical judgements and conclusions based on the available facts.
• Relevant and previous experience of regulatory compliance to NIS standards and the Cyber Assessment Framework in Great Britain and knowledge of EU Directive 2022/2555 (NIS2)
• You will be an effective communicator with excellent stakeholder management skills for engaging with business and technical specialists, and for providing clear verbal, written, graphical and pictorial reporting to a variety of stakeholders. Demonstrable competence in the use of Microsoft productivity applications is essential with experience in using Power Platform for analysis and presentation of data being desirable

About SSE

SSE's purpose is to provide energy needed today while building a better world of energy for tomorrow. We do this by developing, building, operating and investing in electricity infrastructure and businesses needed in the energy transition. Our Transforming for Growth investment plan sees us investing £33bn in critical electricity infrastructure across the five years to 2030.

Our IT division powers growth across all SSE business areas by making sure we have the systems, software and security needed to take the lead in a low carbon world. They provide expertise, advice and day-to-day support in emerging technologies, data and analytics, cyber security and more.

Flexible benefits to fit your life

• Enjoy discounts on private healthcare and gym memberships.
• Wellbeing benefits like a free online GP and 24/7 counselling service.
• Interest-free loans on tech and transport season tickets, or a new bike with our Cycle to Work scheme.
• As well as generous family entitlements such as maternity and adoption pay, and paternity leave.

Work with an equal opportunity employer

SSE will make any reasonable adjustments you need to ensure that your application and experience with us is positive. Please contact [e-mail] / 01738 275 846 to discuss how we can support you.

We're dedicated to fostering an open and inclusive workplace where people from all backgrounds can thrive. We create equal opportunities for everyone to succeed and especially welcome applications from those who may not be well represented in our workforce or industry.