Head of Cyber Security Renewables & Thermal

SSE plc; Reading; Hybrid; GBP 120,000 - 170,000; Full time

Benefits offered by this job

Car/car allowance

Performance bonus

Flexible benefits

Wellbeing package

Job summary

SSE plc is seeking a senior cyber security leader to shape and deliver a strategy that enables a secure, resilient organisation in our Renewables and Thermal units. You will lead governance, risk and assurance across IT and OT, embed secure-by-design practices, and drive cyber readiness across critical infrastructure.

This role demands strategic collaboration with executives and industry partners. You will manage a high-performing team and build strong relationships with business leaders to

Qualifications

• Deep cyber security experience in a large/regulated organisation.
• Proven experience in senior cyber security leadership with focus on outcomes.
• Experience engaging with Executives, Boards and regulators.

Responsibilities

• Shape and deliver the cyber security strategy across Renewables and Thermal businesses.
• Provide leadership across cyber risk, governance, regulatory compliance and assurance.
• Embed secure-by-design across major projects and critical infrastructure.
• Oversee incident response, business continuity and cyber readiness.
• Lead and develop a high-performing cyber security team.
• Build relationships with leaders, suppliers and partners to ensure value and resilience.

Skills

Cyber security leadership

Strategic planning

Governance & risk

Regulatory compliance

Incident response

Education

CISSP or CISM

Job description

Base Location

You'll be expected to spend 50% of your working week in one of the following locations: Reading/Forbury Place OR Glasgow

Salary

Competitive salary + car /car allowance + performance-related bonus + a range of benefits to support your finances, wellbeing and family.

Working Pattern

Permanent | Full Time | Flexible First options available

The role

As the senior cyber security leader for our Renewables and Thermal Business Units, you'll shape and deliver a cyber security strategy that enables a secure, resilient, and forward-thinking organisation. Working collaboratively across the business, you'll embed security into decision-making, operations, engineering activities, and technology transformation programmes, while ensuring compliance with evolving regulatory requirements. Leading a high-performing team, you'll foster a strong security culture, build trusted relationships, and help the business confidently navigate an increasingly complex cyber threat landscape.

You will

• Shape and deliver the cyber security strategy across our Renewables and Thermal businesses, ensuring security enables resilience, innovation, and sustainable growth.
• Provide trusted leadership and oversight across cyber risk, governance, regulatory compliance, and assurance activities spanning both IT and OT environments.
• Partner with engineering, operational, and technology teams to embed secure-by-design principles across major projects, transformation programmes, and critical infrastructure.
• Strengthen cyber resilience by overseeing incident response, operational security, business continuity, and cyber readiness across essential services.
• Lead, coach, and develop a high-performing cyber security team, fostering an inclusive culture where people can learn, grow, and thrive.
• Build strong relationships with business leaders, suppliers, and industry partners, ensuring cyber security investment delivers measurable business value, regulatory compliance, and long-term resilience.

You have

• Deep cyber security experience from working in a Critical National Infrastructure or large and complex organisation, in a regulated environment (ideally NIS.)
• Solid proven experience in senior cyber security leadership positions with extensive experience of leading multi-disciplinary teams across cyber security risk management, governance, and regulatory requirements with a specific focus on business outcomes and service delivery.
• Significant experience engaging Executive Committees, Boards and regulators.
• Certified at Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) level or equivalent.

About SSE

SSE's purpose is to be restless every day until we make electricity clean, affordable and available for all. We do this by developing, building, operating and investing in electricity infrastructure and businesses needed in the energy transition. This includes electricity transmission and distribution networks, onshore and offshore wind farms, hydro-electric power and flexible thermal generation. We also provide products and services for businesses and other customers. Our investment plan will see SSE invest £33bn in critical electricity infrastructure to 2030. Our IT division powers growth across all SSE business areas by making sure we have the systems, software and security needed to take the lead in a low carbon world. They provide expertise, advice and day-to-day support in emerging technologies, data and analytics, cyber security and more.

Flexible Benefits To Fit Your Life

Enjoy discounts on private healthcare and gym memberships. Wellbeing benefits like a free online GP and 24/7 counselling service. Interest-free loans on tech and transport season tickets, or a new bike with our Cycle to Work scheme. As well as generous family entitlements such as maternity and adoption pay, and paternity leave.

Work with an equal opportunity employer

SSE will make any reasonable adjustments you need to ensure that your application and experience with us is positive. Please contact [e-mail] / 01738 275846 to discuss how we can support you. We're dedicated to fostering an open and inclusive workplace where people from all backgrounds can thrive. We create equal opportunities for everyone to succeed and especially welcome applications from those who may not be well represented in our workforce or industry.

Candidates for this role will be required to obtain vetting to SC level through UK Government. The criteria normally includes 5 years UK residency, further information can be found here: United Kingdom Security Vetting: Applicant - GOV.UK (www.gov.uk)