Cyber & Technology Risk & Controls Leader

Scottish and Southern Energy; Preston; In loco; GBP 52.000 - 77.000; Tempo pieno

Vantaggi offerti da questo lavoro

Private healthcare discounts

Wellbeing services

Cycle to Work

Family leave

Descrizione del lavoro

SSE is seeking a Risk & Controls Manager (Cyber & Technology) to lead the development and continuous improvement of the company’s cyber and technology risk and control framework. The role spans IT, OT, digital, data and cloud, ensuring proportionate risk management across SSE’s businesses and services.

You will collaborate with the Cyber Defence GRC team, translate enterprise risk requirements into practical delivery and provide guidance on emerging technologies and risk analytics.

Competenze

• Practical experience of managing cyber, technology, operational, digital or information risks and controls in a complex organisation.
• Ability to apply risk principles to real business analytical and problem-solving skills, including evaluating evidence and identifying control weaknesses.
• Clear and inclusive communication skills to explain complex subjects in plain English and challenge stakeholders.

Mansioni

• Support development, implementation and continuous improvement of SSE's cyber and technology risk and control framework.
• Ensure proportionate and effective risk management across IT, OT, digital, data, cloud and third-party services.
• Translate enterprise risk requirements into practical delivery and provide expert advice to teams.
• Lead, coach and develop colleagues while maintaining integrity and managing priorities.

Conoscenze

Risk management

Cyber security

Stakeholder engagement

Leadership

Clear communication

Descrizione del lavoro

SSE is seeking a Risk & Controls Manager (Cyber & Technology) to lead the development and continuous improvement of the company’s cyber and technology risk and control framework. The role spans IT, OT, digital, data and cloud, ensuring proportionate risk management across SSE’s businesses and services.

You will collaborate with the Cyber Defence GRC team, translate enterprise risk requirements into practical delivery and provide guidance on emerging technologies and risk analytics.