Cyber GRC Lead for Regulated Utilities

InfoSec People Ltd; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid working

Job summary

InfoSec People Ltd client seeks a Cyber Security Governance, Risk & Compliance Lead in London on a permanent, hybrid basis. You will drive regulatory engagement, cyber resilience and assurance across NIS Regulations, NIS2, Ofgem and ISO 27001.

You will coordinate self-assessments, evidence packs and responses, while maintaining risk registers and senior leadership dashboards. Occasional travel to Belgium and Norfolk may be required.

Qualifications

• Significant experience in cyber security governance, risk and compliance within regulated environments.
• Strong knowledge of risk assessments, risk registers and treatment plans.
• Experience with third-party management and supplier risk assurance.
• Understanding of NIS Regulations, NIS2, Ofgem, ECAF and operators of essential services obligations.
• Experience supporting audits, regulatory submissions and assurance programmes.

Responsibilities

• Act as the primary point of contact for cyber security regulatory engagement with Ofgem and regulatory bodies.
• Coordinate submissions, self-assessments, improvement plans and responses to regulatory inquiries and audits.
• Lead assurance activities across NIS Regulations, NIS2, Ofgem requirements, ECAF and ISO 27001.
• Monitor evolving cyber security legislation and guidance and advise on actions.
• Maintain the Cyber Security Risk Register and governance for threat mitigation and actions.
• Support governance and status reporting of the Cyber Security Roadmap and third-party deliverables.
• Develop supply chain cyber security assurance programmes and due diligence processes.
• Prepare dashboards and reports for senior leadership and Board oversight.

Skills

Governance & Compliance

Risk Management

NIS Regulations/NIS2

ISO 27001

Supplier Risk

Stakeholder Management

Audit & Assurance

Regulatory Reporting

Job description

InfoSec People Ltd client seeks a Cyber Security Governance, Risk & Compliance Lead in London on a permanent, hybrid basis. You will drive regulatory engagement, cyber resilience and assurance across NIS Regulations, NIS2, Ofgem and ISO 27001.

You will coordinate self-assessments, evidence packs and responses, while maintaining risk registers and senior leadership dashboards. Occasional travel to Belgium and Norfolk may be required.