Information Security Officer

JERA Nex bp; City Of London; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading offshore wind company in London is looking for an Information Security Specialist to ensure the security of its IT systems, align with regulatory standards, and drive continuous improvement in security protocols. The ideal candidate will have professional certifications and at least five years of experience in information security. The role offers flexible working hours and opportunities for professional development.

Benefits

Collaborative work culture

Flexible working hours

Career growth opportunities

Qualifications

• Minimum 5 years of experience in information security.
• Proven track record of developing and implementing security policies.

Responsibilities

• Evaluate and enforce information security policies.
• Manage the information security management system (ISMS).
• Support incident response planning and investigations.
• Conduct regular risk assessments and audits.
• Promote security awareness and training across the organization.

Skills

CISSP certification

Information security framework understanding

Risk management principles

Proficiency in Microsoft security technologies

Data privacy law familiarity

Incident response experience

Security audit capabilities

Job description

Join us as we work to unlock the value of offshore wind! JERA Nex bp is a new joint venture between JERA, Japan’s largest power generation company, and bp, one of the world’s leading energy companies. Established to unlock the potential of offshore wind across the globe, our talented team, exciting pipeline and solid capital commitment give us the potential to become one of the world’s most successful offshore wind companies.

We entered the market with a portfolio of operational and development assets, alongside the resources, capabilities and resilience to deliver offshore wind energy at scale.

Why this role matters

Ensure the security of JNBP’s Information Technology and that the security meets the expectations of both regulators and shareholders.

In this role you will

• Evaluate, design and ensure enforcement of the information security policies that align with business needs and regulatory requirements such as ISO 27001, NIST, GDPR, and relevant local regulations
• Assure the organisation’s information security management system (ISMS) is managed, extend the ISMS across the group, and drive continuous improvement to meet accreditation standards (e.g., ISO 27001:2022)
• Drive the integration of security controls into business operations and digital solutions in collaboration with Digital, O&M, legal and audit
• Oversee and support incident response planning and investigations, including coordination with legal and disciplinary processes when necessary
• Oversee that regular risk assessments and audits are conducted to identify vulnerabilities and implement mitigation strategies
• Monitor emerging threats and regulatory changes, steering to updating policies and controls accordingly
• Guarantee information security documentation and evidence is maintained as required for external audits and certification processes
• Lead compliance initiatives to ensure adherence to legal, statutory, regulatory, and contractual obligations related to information security
• Promote and where necessary lead security awareness and training across the organisation to ensure all employees understand and comply with security policies
• Ensure and consolidate reporting of incident security incidents and audits as required by leadership, shareholders and regulators.

To be successful in the role you will bring

• Professional certifications such as CISSP (Certified Information Systems Security Professional)
• In-depth understanding of information security frameworks (e.g., ISO/IEC 27001, NIST)
• Strong grasp of risk management principles and practices
• Proficiency in security technologies, particularly the Microsoft suite, and zero trust security architecture.
• Familiarity with data privacy laws and regulations (e.g., GDPR)
• Experience with incident response, disaster recovery, and business continuity planning
• Ability to conduct security audits, and vulnerability assessments
• Minimum 5 years of experience in information security
• Proven track record of developing and implementing security policies and procedures

What you can expect from us

• A collaborative and inclusive work culture, with space for team-building and social activities
• Flexible working hours and the opportunity to work from home, with regular in-person connection
• Opportunities for career growth and professional development in a fast-growing international company.

As we build our company, we are driven by:

Care for each other and our world – we leave egos at the door, are inclusive, collaborative and open to new ideas

A spirit of ingenuity - we are pioneers and innovators making the impossible possible

A commitment to unlocking value from offshore wind – we aim to make offshore wind sustainable, affordable and accessible to the countries & communities we serve.

About JERA Nex bp

JERA Nex bp is a purpose-built offshore wind company committed to unlocking the power of offshore wind by developing high-quality, competitive projects.

A 50:50 joint venture between JERA Co. and bp, JERA Nex bp is an end-to-end developer, owner and operator with more than fifteen years of experience in operating offshore wind projects.

Headquartered in London, with offices across Europe, Asia, US and Australia, JERA Nex bp has a portfolio of operational and development projects across nine countries, and draws on a rich heritage of pioneering offshore wind in Asia Pacific and the North Sea.