OT Security Officer

SSE plc; Glasgow, Perth; On-site; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Car allowance

Performance-related bonus

Flexible working options

Job summary

SSE plc is seeking an OT Security Officer to lead a team of OT Security Analysts and deliver security designs and assessments across IEC 62443. The role will drive security maturity and engage stakeholders to meet regulatory and design needs.

You will travel to operational sites, develop security documentation, and manage pilots, while contributing to SSE Renewables OT security strategy and rollout. A GICSP credential and engineering/IT background with cyber security MSc are preferred.

Qualifications

• OT cybersecurity background required.
• Strong understanding of IEC 62443 and OT environments.
• GICSP accreditation preferred.

Responsibilities

• Lead and mentor a team to collaborate with business representatives to clarify and document security requirements.
• Lead the planning, prioritising, managing and executing security work on multiple complex projects.
• Develop and maintain security documentation and standards/processes.
• Lead the delivery of pilot projects that enhance security as a stakeholder, from design to a transition to operations, and working with Group teams to deliver a blueprint pattern for group deployments where applicable.
• Manage security assessments to identify threats, and to evaluate and drive the implementation of compensating controls around business security risks from those threat actors.
• Travelling to operational sites to assess and provide consultancy to inspection teams, either internal or external.

Skills

OT security

Security design

Risk assessment

Stakeholder communication

Leadership

Education

Engineering degree

Information Technology degree

MSc in Cyber Security

GICSP accreditation

Tools

IEC 62443 framework

Job description

Base Location: You'll be expected to spend 50% of your working week in one of the following locations : Glasgow, Perth or Eurocentral

Salary: £59,800 - £89,800 + car allowance + performance-related bonus and a range of benefits to support your finances, wellbeing and family.

Working Pattern: Permanent | Full Time | Flexible First options available

Candidates for this role will be required to obtain vetting to SC level through UK Government. The criteria normally includes 5 years UK residency, further information can be found here: United Kingdom Security Vetting: Applicant - GOV.UK (www.gov.uk)

The Role

The OT Security Officer role will be responsible for; leading a team of OT Security Analysts and working with stakeholders to manage and deliver the requirements for ongoing security projects that relate to regulatory requirements and internal security by design best practice; identifying and updating security standards around IEC 62443; delivering security designs on projects, delivering on security assessments and technical assurance; leading your team to achieve the OT security objectives; manage the engagement of team and external resources that provide OT security consultancy for security projects, and to manage and report on improvements on security maturity around across IEC 62443, OG 86, NIS2 and NIS/CAF regulation and framework, while participating in steering the SSE Renewables OT security strategy and its rollout.

You Will

Within the bounds of business requirements, there is scope to develop the role in a way that suits your aspirations; typical activities though would be expected to include:

• Lead and mentor a team to collaborate with business representatives to clarify and document security requirements.
• Lead the planning, prioritising, managing and executing security work on multiple complex projects.
• Develop and maintain security documentation and standards/processes.
• Lead the delivery of pilot projects that enhance security as a stakeholder, from design to a transition to operations, and working with Group teams to deliver a blueprint pattern for group deployments where applicable.
• Manage security assessments to identify threats, and to evaluate and drive the implementation of compensating controls around business security risks from those threat actors.
• Travelling to operational sites to assess and provide consultancy to inspection teams, either internal or external.

You Have

A proven background in OT cyber security will allow you add value straight away, but a keenness to build your skills and knowledge is essential. All this needs to be underpinned by a very strong understanding of OT business environments.

• GICSP accredited.
• Experienced in delivering designs to a cyber security framework primarily IEC 62443.
• Able to translate OT cyber security concepts and articulate into common language both for Engineering and Management consumption.
• Able to qualify and quantify cyber security risk as it relates to OT environments.
• Graduate in Engineering or Information Technology, with specific module or MSc in Cyber Security or equivalent experience.

Candidates for this role will be required to obtain vetting to SC level through UK Government. The criteria normally includes 5 years UK residency, further information can be found here: United Kingdom Security Vetting: Applicant - GOV.UK (www.gov.uk)

About SSE

SSE’s purpose is to be restless every day until we make electricity clean, affordable and available for all.

We do this by developing, building, operating and investing in electricity infrastructure and businesses needed in the energy transition. This includes electricity transmission and distribution networks, onshore and offshore wind farms, hydro-electric power and flexible thermal generation. We also provide products and services for businesses and other customers.

Our investment plan will see SSE invest £33bn in critical electricity infrastructure to 2030.

Our IT division powers growth across all SSE business areas by making sure we have the systems, software and security needed to take the lead in a low carbon world. They provide expertise, advice and day-to-day support in emerging technologies, data and analytics, cyber security and more.

Flexible benefits to fit your life

Enjoy discounts on private healthcare and gym memberships. Wellbeing benefits like a free online GP and 24/7 counselling service. Interest-free loans on tech and transport season tickets, or a new bike with our Cycle to Work scheme. As well as generous family entitlements such as maternity and adoption pay, and paternity leave.

Work with an equal opportunity employer

SSE will make any reasonable adjustments you need to ensure that your application and experience with us is positive. Please contact [e-mail] / 01738 275 846 to discuss how we can support you.

We're dedicated to fostering an open and inclusive workplace where people from all backgrounds can thrive. We create equal opportunities for everyone to succeed and especially welcome applications from those who may not be well represented in our workforce or industry.