Cyber Supply Chain Security Strategist

SSE plc; Glasgow; On-site; GBP 64,000 - 77,000; Full time

Job summary

The SSE plc is hiring a Cyber Supply Chain Security Specialist to deliver key aspects of the supply chain security strategy. You will define contract clauses, support negotiations, and drive assurance for critical third party suppliers to minimise cyber risk for SSE.

The role collaborates with SSE teams and external suppliers, supports due diligence, supplier onboarding/offboarding, and incident response activities within the Threat, Detection & Response framework.

Qualifications

• Good understanding of cyber security frameworks, controls and principles involved in supply chain security and the associated risks and regulatory requirements of cyber security and data protection.
• Experience in cyber security or third-party security auditing, assurance controls or similar capabilities including planning, fieldwork and reporting.
• Experience of working with commercial suppliers and the ability to negotiate vendor requirements, deal with conflict and best practice in supply chain cyber security.
• Experience engaging with a security operations team during supply chain security incidents.
• Good influencing skills and attention to detail and the ability to effectively manage conflicting stakeholder needs.

Responsibilities

• Support the creation of procedures and contract requirements that clearly define and embed security responsibilities within supply chain operations, ensuring compliance with NIS regulations.
• Work with business and procurement colleagues to understand cyber security supply chain risks and support supplier due diligence, selection and contractual negotiations.
• Deliver self or work with an outsourced third party to deliver supplier assurance reviews to confirm that legislative, regulatory and SSE cyber security standards are adhered to by critical suppliers. Record operational assurance findings and where required, drive a list of mitigating recommendations for stakeholder management and cyber risk assessment.
• Support supply chain security incidents in conjunction with the Threat, Detection & Response team.
• Support supplier lifecycle security by overseeing day to day use of supply chain security monitoring tooling, supplier notifications, and supplier security on/offboarding activities.

Skills

Cyber security knowledge

Supplier risk management

Negotiation

Stakeholder engagement

Incident response coordination

Job description

The SSE plc is hiring a Cyber Supply Chain Security Specialist to deliver key aspects of the supply chain security strategy. You will define contract clauses, support negotiations, and drive assurance for critical third party suppliers to minimise cyber risk for SSE.

The role collaborates with SSE teams and external suppliers, supports due diligence, supplier onboarding/offboarding, and incident response activities within the Threat, Detection & Response framework.