Senior InfoSec & Data Governance Lead

SES; Scotland; On-site; GBP 70,000 - 110,000; Full time

Job summary

SES is seeking a senior information security and data governance professional to lead governance, risk, and compliance across regulated environments. You will develop security policies, manage data classification and retention, and coordinate audits while aligning with GDPR, ISO 27001, NIST CSF, and energy sector regulations.

OT exposure is desirable and collaboration across multiple regions is expected. The role emphasizes governance excellence, third-party risk management, and continuous

Qualifications

• Significant experience in information security, cybersecurity GRC, or IT governance roles.
• Proven experience implementing data governance frameworks.
• Strong understanding of international data protection and cybersecurity regulations.

Responsibilities

• Develop, implement, and maintain information and cyber security policies, standards, and procedures.
• Ensure alignment with ISO 27001, NIST CSF, CIS Controls.
• Conduct risk assessments across IT, cloud, and OT environments.
• Support incident response planning and continuous improvement of security controls.
• Embed secure-by-design principles into infrastructure and operational systems.
• Establish and maintain an enterprise data governance framework.
• Define and enforce data classification, handling, retention, and protection standards.
• Ensure compliance with GDPR, UK Data Protection Act, and applicable US privacy laws.
• Promote data ownership, stewardship, and accountability across business units.
• Support data quality, integrity, and lifecycle management.
• Ensure compliance with cybersecurity, data governance, and energy sector regulations.
• Lead and support internal and external audit activities, including evidence collection and remediation tracking.
• Maintain enterprise risk registers and compliance reporting.
• Continuously monitor global cyber and data regulatory changes.
• Assess impact of regulatory developments and update internal policies, standards, and procedures accordingly.
• Ensure compliance is maintained across all regions of operation.
• Design and deliver enterprise cybersecurity awareness programmes.
• Conduct phishing simulations and risk-based awareness campaigns.
• Tailor training for corporate and operational (OT) environments.
• Measure effectiveness and drive continuous improvement in user behaviour.
• Act as subject matter expert and advisor on security, governance, and compliance matters.
• Administer and support third-party/vendor risk management programme.
• Provide reporting and insights to leadership on security posture, regulatory changes, and risk exposure.
• Contribute to the continuous improvement of governance, risk, and compliance (GRC) capability.
• Member of change management board and contributor to change management process.

Skills

GRC expertise

Regulatory compliance

Risk assessment

Stakeholder management

Security frameworks

OT security

Job description

SES is seeking a senior information security and data governance professional to lead governance, risk, and compliance across regulated environments. You will develop security policies, manage data classification and retention, and coordinate audits while aligning with GDPR, ISO 27001, NIST CSF, and energy sector regulations.

OT exposure is desirable and collaboration across multiple regions is expected. The role emphasizes governance excellence, third-party risk management, and continuous