Head of Cyber Security Renewables & Thermal

SSE plc; Havant; Hybrid; GBP 120,000 - 160,000; Full time

Benefits offered by this job

Private healthcare

Gym membership

Online GP

Counselling service

Cycle to Work scheme

Tech/transport loan

Family entitlements

Job summary

SSE plc seeks a senior cyber security leader to shape strategy across Renewables and Thermal units, embedding secure-by-design principles and driving resilience. The role partners with engineering and operations to ensure compliant, secure delivery of major projects in a regulated environment.

You will lead risk governance, incident response and cyber readiness, building a high-performing team and strong relationships with senior leadership and external partners.

Qualifications

• CISSP or CISM certification.
• Experience in a Critical National Infrastructure or large regulated organisation.
• Senior leadership experience with cross-functional teams in cyber risk, governance and regulatory compliance.

Responsibilities

• Shape and deliver the cyber security strategy across Renewables and Thermal businesses, enabling resilience and growth.
• Provide oversight across cyber risk, governance, regulatory compliance and assurance for IT and OT.
• Partner with engineering and operations teams to embed secure-by-design across major projects and transformations.
• Strengthen cyber resilience with incident response, continuity and cyber readiness across essential services.
• Lead, coach and develop a high-performing cyber security team with an inclusive culture.

Skills

CISSP/CISM

Cyber security leadership

Regulatory compliance

Executive engagement

Job description

Base Location: You'll be expected to spend 50% of your working week in one of the following locations : Reading/Forbury Place OR Glasgow

Salary: Competitive salary + car /car allowance + performance-related bonus + a range of benefits to support your finances, wellbeing and family.

Working Pattern: Permanent | Full Time | Flexible First options available

The role

As the senior cyber security leader for our Renewables and Thermal Business Units, you'll shape and deliver a cyber security strategy that enables a secure, resilient, and forward-thinking organisation. Working collaboratively across the business, you'll embed security into decision-making, operations, engineering activities, and technology transformation programmes, while ensuring compliance with evolving regulatory requirements. Leading a high-performing team, you'll foster a strong security culture, build trusted relationships, and help the business confidently navigate an increasingly complex cyber threat landscape.

You will

• Shape and deliver the cyber security strategy across our Renewables and Thermal businesses, ensuring security enables resilience, innovation, and sustainable growth.
• Provide trusted leadership and oversight across cyber risk, governance, regulatory compliance, and assurance activities spanning both IT and OT environments.
• Partner with engineering, operational, and technology teams to embed secure-by-design principles across major projects, transformation programmes, and critical infrastructure.
• Strengthen cyber resilience by overseeing incident response, operational security, business continuity, and cyber readiness across essential services.
• Lead, coach, and develop a high-performing cyber security team, fostering an inclusive culture where people can learn, grow, and thrive.
• Build strong relationships with business leaders, suppliers, and industry partners, ensuring cyber security investment delivers measurable business value, regulatory compliance, and long-term resilience.

You have

• Deep cyber security experience from working in a Critical National Infrastructure or large and complex organisation, in a regulated environment (ideally NIS.)
• Solid proven experience in senior cyber security leadership positions with extensive experience of leading multi-disciplinary teams across cyber security risk management, governance, and regulatory requirements with a specific focus on business outcomes and service delivery.
• Significant experience engaging Executive Committees, Boards and regulators.
• Certified at Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) level or equivalent.

About SSE

SSE’s purpose is to be restless every day until we make electricity clean, affordable and available for all.

We do this by developing, building, operating and investing in electricity infrastructure and businesses needed in the energy transition. This includes electricity transmission and distribution networks, onshore and offshore wind farms, hydro-electric power and flexible thermal generation. We also provide products and services for businesses and other customers.

Our investment plan will see SSE invest £33bn in critical electricity infrastructure to 2030.

Our IT division powers growth across all SSE business areas by making sure we have the systems, software and security needed to take the lead in a low carbon world. They provide expertise, advice and day-to-day support in emerging technologies, data and analytics, cyber security and more.

Flexible Benefits To Fit Your Life

Enjoy discounts on private healthcare and gym memberships. Wellbeing benefits like a free online GP and 24/7 counselling service. Interest-free loans on tech and transport season tickets, or a new bike with our Cycle to Work scheme. As well as generous family entitlements such as maternity and adoption pay, and paternity leave.

Work with an equal opportunity employer

SSE will make any reasonable adjustments you need to ensure that your application and experience with us is positive. Please contact [e-mail] / 01738 275846 to discuss how we can support you.

We're dedicated to fostering an open and inclusive workplace where people from all backgrounds can thrive. We create equal opportunities for everyone to succeed and especially welcome applications from those who may not be well represented in our workforce or industry.

Candidates for this role will be required to obtain vetting to SC level through UK Government. The criteria normally includes 5 years UK residency, further information can be found here: United Kingdom Security Vetting: Applicant - GOV.UK (www.gov.uk)