Base Location
You will be expected to spend 50% of your working week in one of the following locations: Glasgow, Perth, Havant or Reading.
Salary
£42,600 - £64,000 + performance-related bonus and a range of benefits to support your finances, wellbeing and family.
Working Pattern
Permanent | Full Time | Flexible First options available.
The Role
Reporting to the OT Resilience manager, the Cyber Compliance Specialist will support the development, implementation and assurance of the cybersecurity and resilience management systems to ensure continuous, effective and secure operation of our generating assets, in line with legislation such as the Network & Information Systems Regulations, Grid Code, EU Directive 2022/2555, etc.
Working with colleagues within the OT team, Asset Management and Operations you'll play a key role in setting cyber security and resilience standards for Operating Technologies across SSER's portfolio of Onshore and Offshore Wind, Hydro, Solar and Battery assets and will be critical in ensuring that relevant documented policies, standards and procedures are in place, and implement a robust assurance programme across the fleet.
You Will
* Through regular stakeholder engagement, maintain a tracking programme to identify, manage and address any regulatory, audit and compliance gaps to NIS and other relevant legislation for SSE Renewables.
* Develop and maintain a system for real‑time tracking and self‑service reporting on the status of compliance to the National Cyber Security Centre's (NCSC) Cyber Assessment Framework (CAF) and other suitable standards across SSE Renewables.
* Support the development of submissions and presentations to regulators, and facilitate the periodic audits and inspections.
* Provide continuous, interactive reporting to stakeholders, and senior leadership to positively influence and build consensus in support of resilient, cybersecure culture and compliance.
* Develop and enhance OT processes and procedures, implementing continuous improvement methodologies to reduce risks and drive efficiency through best practice.
You Have
* Experience in assurance or compliance within a technology risk environment, preferably within the energy or other utility industry.
* Knowledge of SCADA and other Industrial Control Systems in the context of Operating Technology, and a deep understanding of the differences and similarities to conventional IT, capable of developing solutions that are fit for the unique challenges in an always‑on, real‑time, high‑risk environment.
* Strong analytical skills to collate information from multiple sources and form logical judgements and conclusions based on the available facts.
* Relevant and previous experience of regulatory compliance to NIS standards and the Cyber Assessment Framework in Great Britain and knowledge of EU Directive 2022/2555 (NIS2).
* You will be an effective communicator with excellent stakeholder management skills for engaging with business and technical specialists, and for providing clear verbal, written, graphical and pictorial reporting to a variety of stakeholders. Demonstrable competence in the use of Microsoft productivity applications is essential with experience in using Power Platform for analysis and presentation of data being desirable.
Benefits
Enjoy discounts on private healthcare and gym memberships. Wellbeing benefits like a free online GP and 24/7 counselling service. Interest‑free loans on tech and transport season tickets, or a new bike with our Cycle to Work scheme. As well as generous family entitlements such as maternity and adoption pay, and paternity leave.
Equal Opportunity Employer
SSE will make any reasonable adjustments you need to ensure that your application and experience with us is positive.
We're dedicated to fostering an open and inclusive workplace where people from all backgrounds can thrive. We create equal opportunities for everyone to succeed and especially welcome applications from those who may not be well represented in our workforce or industry.
#J-18808-Ljbffr