Energy Sector CISO: Lead Secure Digital Transformation

Great British Energy Group; Aberdeen City; On-site; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Competitive base salary

Performance bonus

Excellent pension

Life assurance (4x salary)

Income protection

38 days annual leave

Flexible working

Professional development

Job summary

Great British Energy Group in Aberdeen seeks a Chief Information Security Officer to lead the security function from inception, aligning with NCSC Cyber Assessment Framework and UK GDPR, and to build a resilient, secure estate across cloud, on‑premise, and partner environments.

You will own security strategy, risk management, incident response, and assurance, reporting to the CDIO and collaborating with boards, delivery partners and suppliers to establish an end‑to‑end security capability for a

Qualifications

• Senior security leader with executive reporting experience.
• Proven track record in building or rebuilding a security function in a fast‑moving org.
• Ability to present risk clearly to boards and audit committees.

Responsibilities

• Take ownership of security decisions during establishment phase.
• Establish security operating model and minimum requirements.
• Decide and implement the delivery model for detecting and responding to attacks.
• Secure the establishment of GBE’s own environments (cloud, identity, access).
• Establish incident response and on‑call arrangements.
• Baseline security maturity and publish a road map with ownership.

Skills

Security leadership

Board communications

Risk management

Incident management

CISO experience

Tools

NCSC CAF

Job description

Great British Energy Group in Aberdeen seeks a Chief Information Security Officer to lead the security function from inception, aligning with NCSC Cyber Assessment Framework and UK GDPR, and to build a resilient, secure estate across cloud, on‑premise, and partner environments.

You will own security strategy, risk management, incident response, and assurance, reporting to the CDIO and collaborating with boards, delivery partners and suppliers to establish an end‑to‑end security capability for a