Cyber Security Manager

Elexon; Greater London; Hybrid; GBP 68,000 - 92,000; Full time

Benefits offered by this job

Bonus

Private medical insurance

Generous pension scheme

Job summary

Elexon is seeking an experienced SSES Cyber Security Lead to shape cyber security arrangements underpinning the UK's energy markets. You will provide independent, authoritative guidance to the Chair of the SSES Security Governance Group and work across government, regulators and industry.

This senior role requires extensive information security leadership, architecture and risk management experience. We operate a hybrid model with two days in our London office and offer strong benefits.

Qualifications

• Extensive experience leading information security programmes and governance.
• Proven track record in security architecture and risk management.
• Strong understanding of CAFs, NIS landscape and ISO 27001 audits.
• Experience advising regulators and industry stakeholders with credibility.
• SC Clearance or willingness to obtain.

Responsibilities

• Provide independent cyber security advice to regulators and industry.
• Lead development of risk assessments and security controls.
• Monitor cyber threat landscape and advise on mitigations.
• Create and maintain security architecture and guidance documents.
• Support audits including CAF responses and assurance activities.
• Lead strategic cyber security initiatives across Elexon.
• Engage with government, Ofgem, industry bodies and OEMs.

Skills

Information Security management

Security Architecture

Cyber Risk frameworks

Cyber Assessment Frameworks (CAF)

NCSC CAF & NIS knowledge

Information Security audits

Public speaking

Stakeholder management

Education

CISSP certification

ISO 27001 Lead Implementer

Job description

We’re looking for an experienced SSES Cyber Security Lead (Grade 12) to join our Information Security team and play a pivotal role in shaping the cyber security arrangements underpinning the UK's future energy markets.

This is a senior subject matter expert role, providing independent, authoritative technical and strategic advice to the Chair of the SSES Security Governance Group and working across government, regulators, industry and Elexon.

What you’ll do:

• Provide independent, authoritative cyber security advice and technical leadership to the Chair of the SSES Security Governance Group.
• Lead and contribute to the development and maintenance of Threat and Risk Assessments, ensuring cyber risks are identified, assessed and appropriately treated.
• Monitor the evolving cyber security, Internet of Things and grid stability landscape, both in the UK and internationally, and assess the implications for SSES.
• Identify emerging threats, risks and vulnerabilities and propose appropriate controls or approaches to ensure risks remain within tolerance.
• Develop and maintain key security documentation, including Trust Modelling, Consumer Led Flexibility Security Architecture, Security Requirements and supporting guidance.
• Support Ofgem with the audit and assurance regime for organisations within the scope of the load control licence, including Cyber Assessment Framework (CAF) returns and audits.
• Work with Ofgem and the SSES Security Governance Group to oversee and monitor remediation activity where assurance requirements are not met.
• Provide specialist cyber security expertise to SSES workgroups and contribute to the development and maintenance of key security documentation.
• Provide SME support on the design, assessment and delivery of industry change, particularly where new or updated standards and regulatory developments impact flexibility markets.
• Advise on cyber risk, security architecture, information security standards, governance and assurance across Consumer Led Flexibility.
• Provide cyber security advice and support to regulators, government and industry stakeholders.
• Contribute to the development of the SSES sub-sector State of the Sector report.
• Lead or contribute to strategic initiatives and technical projects across Information Security and, where required, the wider Elexon organisation.
• Build and maintain strong relationships with a broad range of external stakeholders, including government departments, regulators, industry participants, technology providers and standards bodies.
• Support knowledge sharing across the Information Security team and wider Elexon.
• Develop consultation responses, engagement materials and other communications relating to SSES security governance.
• Identify opportunities to improve Elexon’s approaches, methodologies and use of tools to strengthen cyber security and resilience.

What you’ll bring:

• Significant experience in Information Security management, with a minimum of five years' relevant professional experience.
• Significant experience of Security Architecture approaches and frameworks.
• Significant experience of Cyber Risk approaches and frameworks, including identifying, assessing and treating cyber threats and risks.
• Significant experience of Cyber Assessment Frameworks and Cyber Resilience Audits, ideally within the energy industry.
• Extensive knowledge and practical experience of NCSC's Cyber Assessment Framework (CAF) and the Network and Information Systems (NIS) landscape.
• Extensive experience conducting or supporting Information Security audits, including ISO 27001 certification audits.
• Strong technical knowledge of domestic and international Information Security standards and associated processes, with expert knowledge in relevant specialist areas.
• The ability to analyse complex problems, assess potential solutions and provide clear, evidence-based recommendations.
• The credibility and confidence to provide authoritative guidance and leadership to a wide range of external stakeholders.
• Strong presentation and public speaking skills, with the ability to communicate complex technical issues effectively to different audiences.
• Knowledge of the roles and responsibilities of organisations involved in flexibility markets, including OEMs, Flexibility Service Providers (FSPs), DSOs and NESO.
• Strong stakeholder management and influencing skills, with the ability to build trusted relationships across government, regulators, industry and technical communities.
• Proficiency in Microsoft Office and an openness to learning and adopting new programmes, tools and methodologies.
• Relevant academic and/or professional experience.
• ISO 27001 Lead Implementer and CISSP qualifications.
• SC Clearance, or willingness to attain SC Clearance following a successful application.

It would also be useful, although not essential, if you have:

• Good knowledge of electricity market arrangements and procedures.
• Knowledge of Information Security data exchanges used by Energy Smart Appliances and Load Controllers.
• An understanding of industry developments that could impact Elexon, its processes and systems over the medium to long term.
• Experience using data processing tools and techniques.
• An understanding of the impact of change on customers’ systems and processes.
• An interest in developing knowledge of complex technical energy market arrangements and procedures.

What’s in it for you:

• Salary – £80,000
• Excellent benefits including bonus, private medical insurance and generous pension scheme
• The opportunity to work within a thriving organisation which can support your growth and development
• We operate a hybrid working approach with 2 days in our London office

Our culture:

We believe a diverse and inclusive culture allows innovation and creativity to flourish. We are committed to continuously improving our culture for our colleagues and stakeholders.

Through our Diversity Forum, Mental Health First Aid network and regular programme of activities and events, we celebrate difference and recognise the value of employee wellbeing.

At Elexon, we want to:

• Provide true equality of opportunity.
• Attract and retain diverse talent.
• Listen to all voices.
• Be representative of the communities we work in.
• Be a role model for Diversity and Inclusion in the industry.

Our values shape the way we work. We think beyond, put customers first, focus on what matters, work at pace and work as one team.

Elexon together — embracing differences, listening to all voices.

Ready to make an impact? Join us and help shape the future of energy services.