Head of Information Security & Data Protection

JR United Kingdom; United Kingdom; Remote; GBP 80,000 - 120,000; Full time

Job summary

An established industry player is seeking a Head of Information Security & Data Protection to lead critical initiatives in safeguarding consumer data. This pivotal role involves developing strategies that ensure compliance with GDPR and other regulations while fostering a culture of security awareness. As a leader, you will interface with regulatory bodies and manage risk effectively, driving transformative changes in the energy sector. Join a forward-thinking organization committed to innovation and consumer trust.

Qualifications

• Extensive experience in senior information security roles in regulated environments.
• Knowledge of GDPR and Data Protection laws.

Responsibilities

• Accountable for Information Security & Data Protection topics including GDPR.
• Monitor compliance with GDPR and other data protection laws.

Skills

GDPR

Information Security

Data Protection

ISO27001

Problem-solving

Communication Skills

Interpersonal Skills

Education

Degree in Computer Science

Masters in Information Security

Job description

Social network you want to login/join with:

Head of Information Security & Data Protection, united kingdom

col-narrow-left

Client:

Retail Energy Code Company

Location:

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

2

Posted:

05.05.2025

Expiry Date:

19.06.2025

col-wide

Job Description:

Head of Information Security & Data Protection

Hours: Full-time

Location: Remote, with occasional travel to London for events and team activities.

About Us

The Retail Energy Code Company (RECCo) is responsible for managing and evolving the Retail Energy Code (REC), which governs the interactions of parties involved in the Great Britain retail energy market. Our mission is to ensure the efficient and effective operation of the market, promoting innovation, competition, and delivering positive outcomes for consumers. We manage a range of critical services, all aimed at driving operational efficiencies and delivering value to the industry and consumers alike.

RECCo supports a broad set of stakeholders, including energy suppliers, network operators, and metering service providers, facilitating the effective delivery of their obligations under the REC. This makes RECCo a vital player in shaping the future of the energy market.

The Role

As data becomes increasingly important in the running of the energy industry, we need a leader of Information Security and Data Protection who can lead these aspects for the consumer consent and help shape our data strategy and services with an information security and data protection lens. By understanding the risks, how to manage and mitigate them you will support a transformation of the energy sector for the benefit of the consumer.

You will have responsibility for ensuring that RECCo and its service providers implement best practice policies, procedures and approaches that address cyber security, data privacy and protection. Including compliance with all relevant laws and regulations.

About RECCo’s Consumer Consent

Consumer Consent is fundamental in enabling consumers to positively share data and get access to new or existing energy services which ultimately will save them money and carbon. Consumer Consent is the be designed to provide a secure, simple and effective user experience, with user-centricity at the heart of every interaction.

As part of the industrial transformation, this Consumer Consent mechanism will not only streamline data sharing but also ensure that consumers trust is improved in energy. Consumer Consent is critical to the future of energy.

What you’ll do

• Accountable for Information Security & Data Protection topics including GDPR and Information Security across all RECCo functions.
• Interface with energy regulator and industry bodies for information security and data protection matters, demonstrating RECCo as a leader in these fields.
• Responsible for Consumer Consent Data Protection and Information Security Matters.
• Responsible for developing and support the data and digital strategies with ownership of information security and data protection aspects, to securely enable broader use of industry data sets for the benefit of the consumer.
• Accountable for developing and manage frameworks, processes, tools and consultancy which supports a risk-based approach within RECCo and our partners for service delivery.
• Monitor compliance with GDPR and other data protection laws.
• Identify acceptable levels of residual risk and manage action plans, policy and changes for risk mitigation.
• Proactive identification of information security and data protection risks and their management and mitigation.
• Complete DPIAs and support RECCo colleagues and partners in a consultive manner on Information Security, GDPR, Data Protection and Cyber aspects.
• Responsible for conducting investigations into information security incidents. Including historic and trending analysis where appropriate.
• Be the point of contact with ICO (Information Commissioner’s Office) and other relevant bodies for RECCo.

About You

• Degree in Computer Science or equivalent with completion of security modules.
• Extensive experience working in senior information security roles, ideally with complex or regulated environments
• Knowledge, understanding and practical experience working with:
• GDPR, Data Protection laws and rules
• ISO27001
• Excellent problem-solving skills with the ability to analyse complex problems, manage risk, and simplify appropriately for the audience.
• Excellent listening and communication skills (both oral and written)
• Strong interpersonal skills and the ability to build relationships quickly with partner organisations.
• Experience in managing change and managing partners

Ideally you’d also have

• Masters or higher in information security or equivalent

Our commitment

At RECCo we are committed to cultivating an environment that promotes equality, diversity and inclusion. We want you to bring your authentic self to work every day and feel comfortable being you, no matter your age, gender identity, ethnicity, religion, disability status or otherwise.