Senior Information Security & Data Governance Leader

SES Energy Ltd.; Aberdeen City; On-site; GBP 65,000 - 90,000; Full time

Job summary

SES Energy Ltd. is seeking a senior Information Security, Governance, Risk and Compliance professional to lead security policy development, data governance, and regulatory oversight. You will drive risk assessments across IT, OT, and cloud, while coordinating audits and controls effectiveness across multiple jurisdictions.

The role emphasizes secure-by-design principles, adherence to GDPR/UK DP laws, and collaboration with leadership on policy evolution and risk posture.

Qualifications

• Significant experience in information security, cybersecurity GRC, or IT governance.
• Proven experience implementing data governance frameworks.
• Strong understanding of international data protection and cybersecurity regulations.

Responsibilities

• Develop, implement, and maintain information and cyber security policies, standards, and procedures.
• Align with ISO 27001, NIST CSF, and CIS Controls frameworks.
• Conduct risk assessments across IT, cloud, and OT environments.
• Support incident response planning and continuous improvement of security controls.
• Embed secure-by-design principles into infrastructure and operations.
• Establish and maintain an enterprise data governance framework.
• Define data classification, handling, retention, and protection standards.
• Ensure GDPR, UK Data Protection Act, and applicable US privacy law compliance.
• Promote data ownership, stewardship, and accountability across business units.
• Lead internal and external audit activities and remediation tracking.
• Monitor regulatory changes and update policies accordingly.
• Oversee governance, risk, and compliance (GRC) activities and vendor risk.

Skills

InfoSec

GRC

IT Governance

Regulatory Compliance

Risk Assessment

Stakeholder Engagement

Security Standards

Job description

SES Energy Ltd. is seeking a senior Information Security, Governance, Risk and Compliance professional to lead security policy development, data governance, and regulatory oversight. You will drive risk assessments across IT, OT, and cloud, while coordinating audits and controls effectiveness across multiple jurisdictions.

The role emphasizes secure-by-design principles, adherence to GDPR/UK DP laws, and collaboration with leadership on policy evolution and risk posture.