SSES Cyber Security Lead

Elexon Ltd; Greater London; Hybrid; GBP 72,000 - 88,000; Full time

Benefits offered by this job

Bonus

Private medical insurance

Generous pension scheme

Hybrid working

Job summary

Elexon Ltd is seeking an experienced SSES Cyber Security Lead (Grade 12) to shape cyber security for the UK energy markets. You will advise the Chair of the SSES Security Governance Group and work across government, regulators, industry and Elexon.

This senior SME role requires authoritative guidance on cyber risks, security architecture and governance, with responsibilities spanning strategy, risk assessments and industry change delivery. Hybrid London presence is required.

Qualifications

• Minimum five years’ experience in Information Security management.
• Experience with Security Architecture approaches and frameworks.
• Experience with Cyber Risk approaches and frameworks.
• Experience with Cyber Assessment Frameworks and Cyber Resilience Audits, ideally in energy industry.
• Extensive knowledge of CAF (NCSC) and the NIS landscape.
• Experience conducting ISO 27001 certification audits.
• Strong knowledge of information security standards and related processes.

Responsibilities

• Provide independent cyber security advice and technical leadership to senior stakeholders.
• Lead the development and maintenance of Threat and Risk Assessments.
• Monitor cyber security landscape and assess implications for SSES.
• Identify threats, risks and vulnerabilities and propose controls.
• Develop security documentation including Trust Modelling and Security Architecture docs.
• Support Ofgem audits and CAF returns.
• Collaborate with Ofgem and the SSES Group to monitor remediation.

Skills

Information Security management

Security Architecture

Cyber Risk

CAF & NIS knowledge

ISO 27001 audits

Public speaking

Stakeholder management

Microsoft Office

Education

ISO 27001 Lead Implementer

CISSP

Job description

Location: London Employment: Permanent, full-time Salary: 80000 Posted Date: 04 Sep 2026 Closing Date: 18 Sep 2026

We’re looking for an experienced SSES Cyber Security Lead (Grade 12) to join our Information Security team and play a pivotal role in shaping the cyber security arrangements underpinning the UK’s future energy markets.

This is a senior subject matter expert role, providing independent, authoritative technical and strategic advice to the Chair of the SSES Security Governance Group and working across government, regulators, industry and Elexon.

What you’ll do:

Provide independent, authoritative cyber security advice and technical leadership to the Chair of the SSES Security Governance Group.

Lead and contribute to the development and maintenance of Threat and Risk Assessments, ensuring cyber risks are identified, assessed and appropriately treated.

Monitor the evolving cyber security, Internet of Things and grid stability landscape, both in the UK and internationally, and assess the implications for SSES.

Identify emerging threats, risks and vulnerabilities and propose appropriate controls or approaches to ensure risks remain within tolerance.

Develop and maintain key security documentation, including Trust Modelling, Consumer Led Flexibility Security Architecture, Security Requirements and supporting guidance.

Support Ofgem with the audit and assurance regime for organisations within the scope of the load control licence, including Cyber Assessment Framework (CAF) returns and audits.

Work with Ofgem and the SSES Security Governance Group to oversee and monitor remediation activity where assurance requirements are not met.

Provide specialist cyber security expertise to SSES workgroups and contribute to the development and maintenance of key security documentation.

Provide SME support on the design, assessment and delivery of industry change, particularly where new or updated standards and regulatory developments impact flexibility markets.

Advise on cyber risk, security architecture, information security standards, governance and assurance across Consumer Led Flexibility.

Provide cyber security advice and support to regulators, government and industry stakeholders.

Contribute to the development of the SSES sub-sector State of the Sector report.

Lead or contribute to strategic initiatives and technical projects across Information Security and, where required, the wider Elexon organisation.

Build and maintain strong relationships with a broad range of external stakeholders, including government departments, regulators, industry participants, technology providers and standards bodies.

Support knowledge sharing across the Information Security team and wider Elexon.

Develop consultation responses, engagement materials and other communications relating to SSES security governance.

Identify opportunities to improve Elexon’s approaches, methodologies and use of tools to strengthen cyber security and resilience.

What you’ll bring:

Significant experience in Information Security management, with a minimum of five years’ relevant professional experience.

Significant experience of Security Architecture approaches and frameworks.

Significant experience of Cyber Risk approaches and frameworks, including identifying, assessing and treating cyber threats and risks.

Significant experience of Cyber Assessment Frameworks and Cyber Resilience Audits, ideally within the energy industry.

Extensive knowledge and practical experience of NCSC’s Cyber Assessment Framework (CAF) and the Network and Information Systems (NIS) landscape.

Extensive experience conducting or supporting Information Security audits, including ISO 27001 certification audits.

Strong technical knowledge of domestic and international Information Security standards and associated processes, with expert knowledge in relevant specialist areas.

The ability to analyse complex problems, assess potential solutions and provide clear, evidence-based recommendations.

The credibility and confidence to provide authoritative guidance and leadership to a wide range of external stakeholders.

Strong presentation and public speaking skills, with the ability to communicate complex technical issues effectively to different audiences.

Knowledge of the roles and responsibilities of organisations involved in flexibility markets, including OEMs, Flexibility Service Providers (FSPs), DSOs and NESO.

Strong stakeholder management and influencing skills, with the ability to build trusted relationships across government, regulators, industry and technical communities.

Proficiency in Microsoft Office and an openness to learning and adopting new programmes, tools and methodologies.

Relevant academic and/or professional experience.

ISO 27001 Lead Implementer and CISSP qualifications.

SC Clearance, or willingness to attain SC Clearance following a successful application.

It would also be useful, although not essential, if you have:

Good knowledge of electricity market arrangements and procedures.

Knowledge of Information Security data exchanges used by Energy Smart Appliances and Load Controllers.

An understanding of industry developments that could impact Elexon, its processes and systems over the medium to long term.

Experience using data processing tools and techniques.

An understanding of the impact of change on customers’ systems and processes.

An interest in developing knowledge of complex technical energy market arrangements and procedures.

What’s in it for you:

Salary –£80,000

Excellent benefits including bonus, private medical insurance and generous pension scheme

The opportunity to work within a thriving organisation which can support your growth and development

We operate a hybrid working approach with 2 days in our London office

Our culture:

We believe a diverse and inclusive culture allows innovation and creativity to flourish. We are committed to continuously improving our culture for our colleagues and stakeholders.

Through our Diversity Forum, Mental Health First Aid network and regular programme of activities and events, we celebrate difference and recognise the value of employee wellbeing.

At Elexon, we want to:

Provide true equality of opportunity.

Attract and retain diverse talent.

Listen to all voices.

Be representative of the communities we work in.

Be a role model for Diversity and Inclusion in the industry.

Our values shape the way we work. We think beyond, put customers first, focus on what matters, work at pace and work as one team.

Elexon together — embracing differences, listening to all voices.

Ready to make an impact? Join us and help shape the future of energy services.