Flexible First Cyber Supply Chain Security Specialist

SSE PLC; Portsmouth; Hybrid; GBP 64,000 - 77,000; Full time

Job summary

SSE is seeking a Cyber Supply Chain Security Specialist to deliver key aspects of the security strategy, including contract clauses and assurance for critical third-party suppliers. You will work with SSE teams and suppliers to understand risks and drive actions to minimise impact on SSE.

This permanent role requires collaborating with procurement, supporting due diligence, and delivering supplier assurance reviews while coordinating with security operations on incidents.

Qualifications

• Good understanding of cyber security frameworks, controls and principles in supply chain security and regulatory requirements.
• Experience in cyber security auditing, assurance controls or similar capabilities including planning, fieldwork and reporting.
• Experience negotiating vendor requirements with commercial suppliers and managing supplier relations.
• Experience engaging with security operations during supply chain incidents.
• Strong influencing skills and attention to detail with ability to balance conflicting stakeholder needs.

Responsibilities

• Support creation of procedures and contract requirements embedding security responsibilities within supply chain operations, ensuring NIS compliance.
• Collaborate with business and procurement to understand cyber security supply chain risks and support due diligence, selection and contract negotiations.
• Deliver supplier assurance reviews (self or outsourced) and record findings with mitigating recommendations for stakeholders.
• Support supply chain security incidents with Threat, Detection & Response teams.
• Oversee day-to-day use of supply chain security monitoring tooling and supplier on/offboarding activities.

Skills

Cyber security frameworks

Supplier risk management

Stakeholder management

Vendor negotiations

Job description

SSE is seeking a Cyber Supply Chain Security Specialist to deliver key aspects of the security strategy, including contract clauses and assurance for critical third-party suppliers. You will work with SSE teams and suppliers to understand risks and drive actions to minimise impact on SSE.

This permanent role requires collaborating with procurement, supporting due diligence, and delivering supplier assurance reviews while coordinating with security operations on incidents.