Information Security Officer (Physical Security)

ENWL; Preston; On-site; GBP 40,000 - 60,000; Full time

Job summary

A utility company in the UK is seeking an Information Security Officer for its Preston office. The role involves ensuring physical security compliance, advising on security policies, and collaborating across teams. Ideal candidates should have relevant certifications and significant experience in information security. Attractive benefits include an annual bonus, private healthcare, and professional development opportunities.

Benefits

An annual bonus scheme

25 days annual leave

Private Healthcare

Employee rewards portal

Market-leading pension scheme

Employee assistance programme

Qualifications

• Proven IT experience in a security audit role.
• Ability to build relationships across business functions.
• Experience in reviewing and advising on security policies.

Responsibilities

• Ensure physical security compliance with policy.
• Collaborate with management to improve security posture.
• Assist with incident reviews and business process compliance.

Skills

Communication with stakeholders

Policy advisory

Physical security experience

Knowledge of GDPR

Security tools expertise

Education

Certification in Information/ Physical Security Management

ISO27001 audit experience

Tools

Centralised application risk management platform

Electronic security systems (IDS, CCTV, ACS)

Job description

Overview

We’re champions of the North West and we’re proud that it’s our electricity network that connects communities and helps keep the electricity flowing every minute of every day, from when you wake up to when you fall asleep and all the hours in between.

A key part of the UK’s journey to net zero carbon is the revolution of our electricity industry to enable clean, green economic growth. As the North West’s electricity network operator, it’s our responsibility to lead the way, help the region decarbonise and pave the way for the growth of renewable energy and a sustainable energy future for all.

We’re proud that in December 2024 we were named Utility of the Year by Utility Week magazine who said we punched above our weight and used innovation to solve some of the industry’s most difficult challenges. Come and be part of our team and make a difference.

Together we have the energy to transform our communities. We are switched on. We are adaptable. We take pride.

Our Information Security team has a fantastic opportunity for an Information Security Officer (Physical Security) to join them in Preston.

Our role

The primary purpose of the role is to ensure physical security is compliant against security policy, acting as advisory, collaborating with stakeholders and management to improve security posture, review policies, and assist with incident, security reviews and ensure business processes comply with ENWL cyber security policy frameworks.

What we’re looking for

Proven IT experience, with time spent in an information security officer role or similar risk/ security audit type role

Certifications:

• Certification in Information/ Physical Security Management (Physical Security Professional (PSP), CRISK/ CISSP). This is not a replacement for experience
• Register Security Engineering Specialist, (RSES) accreditation preferred
• ISO27001 audit experience preferred

The Information Security Officer must have the following:

• The ability to communicate and build strong relationships with business functions across ENWL, work effectively with external partners, and manage stakeholder risk engagement sessions
• Confirmed background in an information security type role with real-world experience of reviewing policies and acting as advisory to the business on a day-to-day basis monitoring security compliance across diverse business functions, specifically focused and exposure to Physical Security environments, with experience of LPCB Loss Prevention Certification Board requirements for product security
• Electronic security system security, (such as IDS, CCTV, ACS), physical security control measures, industry best practice experience
• Experience of using a centralised application risk management platform, and business applications
• Capacity to assist in incidents and support business and HR investigations into data breaches or misuse, ensuring lessons learnt are captured and adopted
• Experience of assessing physical security, and interpreting attack scenarios
• Experience of maintaining policies, procedures, standards, and guidelines
• Capability to become policy subject matter expert, and provide advice and guidance across the organisation in support of security compliance against policies
• Ability to articulate security risk simply and effectively with business managers and business stakeholders
• An appreciation of business drivers, security tools, technologies, and security best practice
• Excellent verbal, written, listening and questioning skills including the ability to communicate effectively with a wide range of both technical and non-technical stakeholders
• Understanding of physical security, within impact to information security related law and regulations such as GDPR and NIS Regulations.
• Previous experience of working within a regulated organisation, preferably Utilities, Energy sectors
• Exposure to cyber security frameworks and standards. I.e. NCSC CAF, NIST, ISO 2700x series, CIS.
• Work with minimal supervision, with ability to adapt to changing priorities and direction
• A team-focused mentality and proven ability to work effectively within a large multi-site organisation
• Understanding of different security testing strategies, with ability to support

What we’re offering

As a vital team member and in return for your expertise, inclusive approach and commitment, we'll provide a favourable salary and the chance to join a passionate and welcoming team. We are committed to ensuring our people are supported and are proud of our reward and benefits offer, which includes:

• An annual bonus scheme
• 25 days annual leave increasing with length of service
• Private Healthcare
• An employee rewards portal offering discounts on several well-known brands
• A market-leading contributory pension scheme
• Employee assistance programme
• Opportunity for professional development through our L&D function.

Our people are important to us and we’re passionate about creating a great place to work where we can all be ourselves, reach our full potential and build long lasting careers. We’re striving to increase diversity of thought and talent in our people and to recruit highly skilled workforce that’s representative of the communities we serve. For us, embracing our differences is what makes us stronger.

Application support & notices

Should you require any additional support with your application, or any adjustments please contact our Recruitment team at [e-mail] or on 0845 366 0092 (option 2)

Any offer made will remain conditional until pre-employment checks are complete to a level deemed satisfactory by SP Electricity North West. Due to the of this role, the following pre-employment checks will be required; references from previous employers, BS7858 checks and a Drug & Alcohol test.

We reserve the right to close this vacancy early.

We don't accept speculative CVs from agencies. Any received we will assert ownership of the candidate and no fee will be payable.