Risk & Controls Manager (Cyber & Technology)

Scottish and Southern Energy; Todmorden; On-site; GBP 52,000 - 77,000; Full time

Benefits offered by this job

Private healthcare discount

Gym membership discount

Wellbeing support

Cycle to Work

Maternity & adoption pay

Paternity leave

Job summary

Scottish and Southern Energy (SSE) is seeking a Risk & Controls Manager (Cyber & Technology) to lead the development and continuous improvement of SSE's cyber and technology risk and control framework across IT, OT, digital data and third-party services. You will translate enterprise risk requirements into practical delivery and provide expert advice to senior leaders.

You will build trusted relationships, coach colleagues, and help teams strengthen ownership of risks, controls and remediation

Qualifications

• Experience managing cyber and technology risk in a complex organisation.
• Clear communication skills to explain complex topics to diverse audiences.

Responsibilities

• Shape and improve SSE's cyber and technology risk and control framework.
• Provide practical advice and constructive challenge to management.
• Develop colleagues and lead risk & controls activities across teams.

Skills

Risk management

Cyber & technology risk

Controls & governance

Leadership & coaching

Stakeholder engagement

Plain English communication

Job description

be clearly articulated, consistently assessed and linked to controls, obligations, issues, incidents and remediation activity. The role also provides constructive challenge to management, helping to strengthen ownership, control effectiveness and risk maturity across the Group. You will Shape and improve how cyber and technology risks are managed, helping teams across the organisation identify, assess and respond to risks affecting technology, data, digital services and operational systems. Help people design and operate effective controls, providing practical advice and constructive challenge so that important risks are understood, controls are clear and any weaknesses are addressed. Turn risk and control information into useful insight, identifying trends, emerging concerns and areas of increasing exposure, and presenting clear reporting that supports informed decisions by senior leaders. Build trusted relationships across technical and business teams, making risk management easier to understand and apply while encouraging people to take ownership of their risks, controls and improvement actions. Lead and develop colleagues while improving ways of working, setting priorities, reviewing the quality of work and creating an inclusive environment where people can contribute, learn and deliver meaningful change. You have Practical experience of managing cyber, technology, operational, digital or information risks and controls in a complex organisation, with the ability to apply risk principles to real business analytical and problem-solving skills, including the ability to evaluate evidence, identify control weaknesses and emerging themes, and reach balanced, proportionate conclusions. Clear and inclusive communication skills, with the confidence to explain complex subjects in plain English, listen to different perspectives and constructively challenge stakeholders at all levels. The ability to build trusted relationships and deliver through others, working collaboratively across different teams, professional backgrounds and viewpoints to achieve shared outcomes. Experience of leading, coaching or developing others, combined with sound judgement, personal integrity and the ability to manage competing priorities in a changing environment. About SSESSE's purpose is to be restless every day until we make electricity clean, affordable and available for all. We do this by developing, building, operating and investing in electricity infrastructure and businesses needed in the energy transition. This includes electricity transmission and distribution networks, onshore and offshore wind farms, hydro-electric power and flexible thermal generation. We also provide products and services for businesses and other customers. Our investment plan will see SSE invest 33bn in critical electricity infrastructure to 2030. Our Technology teams power growth across all SSE business areas by making sure we have the systems, software and security needed to take the lead in a low

Base Location:

You'll be expected to spend 50% of your working week in one of the following locations : Glasgow, Perth, Reading or Havant.

Salary:

51,600 - 77,400, performance-related bonus and a range of benefits to support your finances, wellbeing and family.

Working Pattern:

Permanent | Full Time | Flexible First options available

The Role

The Risk & Controls Manager (Cyber & Technology) supports the development, implementation and continuous improvement of SSE's cyber and technology risk and control framework. The role helps ensure that proportionate and effective risk management is embedded across IT, operational technology (OT), digital, data, cloud and third-party enabled services, taking account of the differing operational, safety, resilience and regulatory contexts across SSE businesses. Working with the Senior Technology Risk & Controls Manager and the wider Cyber Defence GRC team, the role translates enterprise risk requirements into practical delivery. It enables risks to, carbon world. They provide expertise, advice and day-to-day support in emerging technologies, data and analytics, cyber security and more.

Benefits:

• Enjoy discounts on private healthcare and gym memberships.
• Wellbeing benefits like a free online GP and 24/7 counselling service.
• Interest-free loans on tech and transport season tickets, or a new bike with our Cycle to Work scheme.
• As well as generous family entitlements such as maternity and adoption pay, and paternity leave.

Team & Culture

Work with an equal opportunity employer SSE will make any reasonable adjustments you need to ensure that your application and experience with us is positive. Please contact / to discuss how we can support you. We're dedicated to fostering an open and inclusive workplace where people from all backgrounds can thrive. We create equal opportunities for everyone to succeed and especially welcome applications from those who may not be well represented in our workforce or industry.

If you're offered a role with SSE, you'll need to complete a criminality check and a credit check before you start work.