Cyber Security Lead & Incident Response Architect

E.ON UK Ltd; Nottingham; Hybrid; GBP 72,000 - 86,000; Full time

Job summary

E.ON UK Ltd is seeking a Cyber Security Specialist to own regulatory compliance across PCI-DSS, the Smart Energy Code, Retail Energy Code and ITGC/Financial IT controls. You will lead protective monitoring, vulnerability management and incident response, coordinating with auditors and regulators.

The role also involves mentoring juniors and guiding security across DevSecOps and supplier risk. The position is hybrid with locations in Nottingham, Kingswinford or Solihull, offering hands-on

Qualifications

• 5+ years in cyber/information security or similar role.
• Experience managing security compliance (ISO 27001/27002, PCI-DSS).
• Experience designing/operating protective monitoring (SIEM).
• Experience with vulnerability management tooling and external assessments.
• Ability to work with auditors, regulators and third-party providers.
• Hands-on scripting/queries and review of IaC/security scans.

Responsibilities

• Own PCI-DSS, Smart Energy Code, Retail Energy Code and ITGC/Financial IT controls; manage audits end-to-end.
• Lead protective monitoring, SIEM capabilities, dashboards and KPI reporting.
• Lead cyber security incidents from detection to board-level communication.
• Assess and assure cyber posture of IT suppliers and acquisitions.
• Provide security guidance across projects and DevSecOps workflows.
• Maintain ISMS in line with 27001 and support governance.

Skills

Cyber security

Mentoring

Regulatory/compliance

Incident response

Cloud security

Education

Bachelors in a related field

Tools

Splunk

MS Sentinel

Qualys

Wiz

GitLab

Job description

E.ON UK Ltd is seeking a Cyber Security Specialist to own regulatory compliance across PCI-DSS, the Smart Energy Code, Retail Energy Code and ITGC/Financial IT controls. You will lead protective monitoring, vulnerability management and incident response, coordinating with auditors and regulators.

The role also involves mentoring juniors and guiding security across DevSecOps and supplier risk. The position is hybrid with locations in Nottingham, Kingswinford or Solihull, offering hands-on