At a Glance
- Tasks: Ensure physical security compliance and improve security posture across the organisation.
- Company: Join a leading electricity network operator committed to a sustainable energy future in the North West.
- Benefits: Enjoy 25 days annual leave, private healthcare, and a market-leading pension scheme.
- Why this job: Be part of a passionate team making a real difference in the community and the environment.
- Qualifications: Proven IT experience in information security with relevant certifications preferred.
- Other info: Flexible working environment with opportunities for professional development.
The predicted salary is between 36000 - 60000 Β£ per year.
SP Electricity North West manages and invests in the power network that supplies electricity to the 2.4m homes and businesses across the North West. Our 2,400 colleagues manage the 13,000km of overhead lines, 44,000km of underground cables and thousands of electricity substations to keep power flowing and supporting green growth. We\βre one of six distribution network operators in the UK and are regulated by Ofgem.
We\βre proud that in December 2024 we were named Utility of the Year by Utility Week magazine who said we punched above our weight and used innovation to solve some of the industry\βs most difficult challenges. Come and be part of our team and make a difference.
Now part of the Iberdrola and ScottishPower group, we\βre collectively building smarter, greener electricity networks that will get Britain growing by investing in a better future, quicker.
A fantastic opportunity: Information Security Officer (Physical Security focus)
We are looking for a proactive and knowledgeable Information Security Officer. In this role, you will play a key part in ensuring that all aspects of physical security across the organisation meet the standards set out in SP ENW\βs cyber security policy frameworks.
As a trusted advisor, you will collaborate closely with stakeholders and management, providing expert guidance to strengthen our overall security position. You will be responsible for reviewing and improving security policies, supporting incident response activities, conducting security reviews, and ensuring that business processes consistently align with our internal security requirements.
This is an excellent opportunity for someone with strong analytical skills and a passion for continuous improvement in security governance and compliance.
You will work closely with the Information Security Manager to identify and reduce risk, while contributing to the management and delivery of the cyber security compliance schedule. The role includes assessing the current threat landscape and presenting realistic insights into risks and threats across the enterprise environment.
You will support RFI and RFP processes, audits, supplier assessments, and project activities, ensuring that a strong security perspective is maintained throughout. You will manage escalations and deliver clear, transparent, and accurate reporting, while also supporting security communications, awareness campaigns, and training initiatives.
Additionally, you will contribute to security testing procedures to validate system, network, and application security, manage and report on remediation activities for identified risks, and interpret vulnerability management and penetration testing data to determine appropriate risk levels.
What we\βre looking for
- Proven IT experience, with experience in an information security officer role or similar risk/security audit type role;
- Certification in Information/ Physical Security Management (Physical Security Professional (PSP), CRISK/ CISSP)
- Register Security Engineering Specialist, (RSES) accreditation preferred
- ISO27001 audit experience preferred
- The Information Security Officer must have the following:
- Exposure to Physical Security environments, with experience of LPCB Loss Prevention Certification Board requirements for product security
- Electronic security system security, (such as IDS, CCTV, ACS), physical security control measures, industry best practice experience
- Experience of assessing physical security, and interpreting attack scenarios
- Understanding of physical security, within impact to information security related law and regulations such as GDPR and NIS Regulations
- Previous experience of working within a regulated organisation, preferably Utilities, Energy sectors
- Exposure to cyber security frameworks and standards. I.e. NCSC CAF, NIST, ISO 2700x series, CIS.
What we\βre offering
- An annual bonus scheme
- 25 days annual leave increasing with length of service
- Private Healthcare
- An employee rewards portal offering discounts on several well-known brands
- A market-leading contributory pension scheme
- Employee assistance programme
- Opportunity for professional development through our L&D function.
Our Commitment to Inclusion
We\βre proud to foster a workplace where everyone can thrive. We celebrate diversity and are committed to building a team that reflects the communities we serve. We believe that embracing our differences makes us stronger.
If you need any adjustments or support during the application process, please contact our Recruitment Team at careers@enwl.co.uk or call 0845 366 0092 (option 2).
Any offer made will remain conditional until pre-employment checks are complete to a level deemed satisfactory by SP Electricity North West. Due to the of this role, the following pre-employment checks will be required; references from previous employers, BS7858 checks and a Drug & Alcohol test.
We reserve the right to close this vacancy early.
We don\βt accept speculative CVs from agencies. Any received we will assert ownership of the candidate and no fee will be payable.
#J-18808-Ljbffr
Information Security Officer (Physical Security) employer: ENWL
Contact Detail:
ENWL Recruiting Team
StudySmarter Expert Advice π€«
We think this is how you could land Information Security Officer (Physical Security)
β¨Tip Number 1
Familiarise yourself with the specific physical security standards and frameworks mentioned in the job description, such as LPCB Loss Prevention Certification Board requirements. This knowledge will help you demonstrate your expertise during interviews.
β¨Tip Number 2
Network with professionals in the information security field, especially those who have experience in the utilities or energy sectors. Engaging with industry peers can provide valuable insights and potentially lead to referrals.
β¨Tip Number 3
Prepare to discuss real-world scenarios where you've successfully improved security compliance or managed incidents. Being able to articulate your hands-on experience will set you apart from other candidates.
β¨Tip Number 4
Stay updated on the latest trends and technologies in physical security and information security. Showing that you're proactive about learning can impress interviewers and demonstrate your commitment to the role.
We think you need these skills to ace Information Security Officer (Physical Security)
Some tips for your application π«‘
Tailor Your CV: Make sure your CV highlights relevant experience in information security, particularly in physical security environments. Emphasise any certifications you hold, such as PSP or CISSP, and detail your experience with security compliance and policy review.
Craft a Strong Cover Letter: In your cover letter, express your passion for the role and the company. Mention specific projects or experiences that demonstrate your ability to improve security posture and collaborate with stakeholders. Show how your values align with the company's commitment to community and sustainability.
Highlight Relevant Skills: Clearly outline your skills related to physical security systems, risk management, and compliance with regulations like GDPR. Use examples from your past roles to illustrate your ability to communicate effectively with both technical and non-technical stakeholders.
Proofread Your Application: Before submitting, carefully proofread your application materials. Check for spelling and grammatical errors, and ensure that all information is accurate and up-to-date. A polished application reflects your attention to detail and professionalism.
How to prepare for a job interview at ENWL
β¨Understand the Role and Responsibilities
Make sure you have a clear understanding of the Information Security Officer role, especially in relation to physical security. Familiarise yourself with the specific responsibilities mentioned in the job description, such as compliance with security policies and incident management.
β¨Showcase Relevant Experience
Prepare to discuss your previous experience in information security roles, particularly any work related to physical security environments. Highlight your certifications and how they relate to the requirements of the position, such as PSP or CISSP.
β¨Demonstrate Communication Skills
Since the role requires building relationships with various stakeholders, practice articulating complex security concepts in simple terms. Be ready to provide examples of how you've effectively communicated security risks to non-technical audiences in the past.
β¨Familiarise Yourself with Industry Standards
Brush up on relevant security frameworks and standards like ISO 27001, NIST, and GDPR. Being able to discuss these frameworks and how they apply to the role will show your depth of knowledge and commitment to best practices in information security.