Cyber & Technology Risk & Controls Leader

SSE plc; Glasgow; Hybrid; GBP 52,000 - 77,000; Full time

Benefits offered by this job

Private healthcare

Gym discounts

Online GP

Cycle to Work

Family entitlements

Job summary

SSE plc is seeking a Risk & Controls Manager (Cyber & Technology) to lead the development and continuous improvement of the cyber and technology risk and control framework. The role covers IT, OT, digital, data, cloud and third-party services, ensuring proportionate risk management and strong risk maturity across SSE.

Working with the Cyber Defence GRC team, you will translate enterprise risk requirements into practical delivery, enabling clear articulation and consistent assessment of risks,

Qualifications

• Practical experience of managing cyber, technology, operational, digital or information risks and controls in a complex organisation.
• Strong analytical and problem-solving skills, including evaluating evidence and identifying weaknesses and themes.
• Clear and inclusive communication skills to explain complex subjects in plain English.
• Ability to build trusted relationships and work across teams to achieve outcomes.
• Experience of leading or developing others and managing competing priorities in a changing environment.

Responsibilities

• Shape and improve how cyber and technology risks are managed across technology, data, and digital services.
• Help design and operate effective controls and provide practical advice to address weaknesses.
• Turn risk data into insights and present reporting to senior leaders.
• Build trusted relationships across technical and business teams to simplify risk management.
• Lead and develop colleagues, set priorities, and foster an inclusive, change-ready environment.

Skills

Risk management

Analytical thinking

Communication

Stakeholder management

Leadership & coaching

Job description

SSE plc is seeking a Risk & Controls Manager (Cyber & Technology) to lead the development and continuous improvement of the cyber and technology risk and control framework. The role covers IT, OT, digital, data, cloud and third-party services, ensuring proportionate risk management and strong risk maturity across SSE.

Working with the Cyber Defence GRC team, you will translate enterprise risk requirements into practical delivery, enabling clear articulation and consistent assessment of risks,