Cyber Security & Risk Assurance Lead

E.ON; United Kingdom; Remote; GBP 70,000 - 95,000; Full time

Job summary

E.ON UK is seeking a Cyber Security Specialist to manage IT risks and controls across a multi-supplier environment. You will lead security governance, ensure control owners keep risks up to date, and champion security throughout Digital Technology UK.

Responsibilities include risk reporting, internal control testing, and supplier assurance. You will also guide projects on secure by design and perform threat/risk assessments per ISO27005 standards.

Qualifications

• 5+ years in cyber/information security roles.
• Experience with recognised frameworks: ISO 27001/27002, PCI-DSS.
• Experience designing and operating SIEM and protective monitoring.
• Experience interpreting external penetration tests for business audiences.
• Experience assisting third-party/supplier cyber security risk management.

Responsibilities

• Liaise with managers for quarterly risk reporting and sign-offs.
• Organise testing of internal controls and security audits.
• Coordinate with auditors for testing activities.
• Ensure follow-up actions meet standards and deadlines.
• Engage with suppliers/UK teams to ensure security standards.

Skills

Cyber security risk management

Security governance & compliance

Threat and risk assessment

Penetration testing (CHECK-based)

Vulnerability management

Security monitoring & SIEM (Splunk, MS

Tools

Splunk

Microsoft Sentinel

Qualys

GitLab

Job description

E.ON UK is seeking a Cyber Security Specialist to manage IT risks and controls across a multi-supplier environment. You will lead security governance, ensure control owners keep risks up to date, and champion security throughout Digital Technology UK.

Responsibilities include risk reporting, internal control testing, and supplier assurance. You will also guide projects on secure by design and perform threat/risk assessments per ISO27005 standards.