At a Glance
- Tasks: Lead cyber risk management and governance for a critical national infrastructure business.
- Company: Join ScottishPower, a leader in renewable energy and cyber security.
- Benefits: Enjoy 36 days annual leave, competitive salary, and a range of health and wellness perks.
- Other info: Hybrid work model with excellent career growth opportunities in a diverse environment.
- Why this job: Make a real impact on cyber security while contributing to a sustainable future.
- Qualifications: Strong background in cyber security risk and governance; relevant certifications preferred.
The predicted salary is between 59000 - 74000 £ per year.
Location: Glasgow
Salary: £59-74K (up to 15% bonus, private healthcare and 15% pension)
Permanent, Hybrid (2-3 days in office per week)
Join us in building a more secure and sustainable future. ScottishPower Energy Networks (SPEN) is progressing an ambitious Cyber Security Transformation Programme, and we are seeking a Cyber Risk Lead to play a key role in shaping and embedding our cyber risk approach across the organisation. This is an opportunity to contribute directly to a critical national infrastructure business, ensuring that cyber risk methodologies, policies, frameworks, and governance standards are robust, effective, and clearly understood throughout the business.
What you’ll be doing
As Cyber Risk Lead, you will take ownership of identifying, assessing, and managing cyber risks across SPEN. You will maintain and develop the cyber risk register, lead comprehensive risk assessments, and oversee the implementation of risk treatment plans aligned with business objectives and risk appetite. Working closely with the Head of Governance, Risk and Assurance, you will support all aspects of operational technology (OT) risk management and governance, contributing to a broader cyber risk function that underpins SPEN’s commitment to resilience and regulatory compliance, including alignment with NIS requirements. The role also involves shaping and strengthening cyber governance frameworks, ensuring they meet evolving regulatory expectations and industry good practice. You will act as a key point of coordination across stakeholders, including control and risk owners as well as external regulators, helping to promote awareness, transparency, and accountability in cyber risk management. Through clear communication and reporting to senior leadership, you will support informed decision-making and continuous improvement of SPEN’s cyber security posture.
What you’ll bring
We are looking for a professional with a strong background in cyber security risk and governance within a complex organisation. Experience in developing cyber policies, conducting risk assessments, and managing risk treatment plans is essential, along with an understanding of the regulatory landscape affecting IT and OT environments in the energy sector. Relevant industry certifications such as CISSP, CISM, or GICSP will be beneficial, as will experience operating within large-scale or global environments. The ability to engage effectively with stakeholders, lead discussions on emerging risks, and translate technical risk into business context will be key to success in this role.
What’s in it for you
As well as a competitive salary which is reviewed annually, you can also enjoy a number of other benefits. With our pension scheme, we’ll double match your contribution up to a company contribution of 10%. At ScottishPower, we believe it’s the little things we do in life that make a big difference. From helping you look after your family’s wellbeing, save for your future and take personal steps for climate action – our benefits are designed to help you do just that - so that you have everything you need to take care of your world – today and tomorrow. That’s why our benefits include:
- 36 days annual leave
- Holiday purchase – perfect your work/life balance with extra annual leave
- Share Incentive Plan and Sharesave Scheme
- Payroll giving and charity matched funding
- Technology Vouchers – save more and spread the cost of your technology purchases
- Count us in – pledge to reduce carbon emissions and help fight climate change
- Electric Vehicle Schemes – to help you transition to green/clean driving
- Cycle to Work scheme and public transport season ticket loans
- Options to purchase dental insurance, private medical insurance, health cash plan and annual health assessments
- Life Assurance (4x salary)
- Access to ‘nudge’ financial wellbeing support
- Plus shopping, leisure, restaurant and gym discounts, and unique employee deals on travel insurance and more
Why SP Energy Networks
SP Energy Networks is part of the Iberdrola Group, one of the world’s largest integrated utility companies and a world leader in wind energy. We keep electricity flowing to homes and businesses through Central and Southern Scotland, North Wales and in the North West of England. We operate over 4000km of cables and lines that make up the transmission network – connecting infrastructure like wind farms into the electricity system. It’s a role that puts us right at the heart of Scotland’s ambition to be Net Zero by 2044. And we’re taking it very seriously. We’re investing >£5.5 billion into our transmission network, directly supporting the rapid growth needed in renewable energy. With diverse opportunities across our businesses and a commitment to invest in our own internal talent, ScottishPower can offer people real career opportunities that meet personal and professional goals, in a global organisation.
Inclusion, diversity, and a social purpose are at the heart of everything we do. Together with our values, they bring us together into a stronger, more sustainable business with direct links to the communities we serve. It takes all kinds of people to build a large-scale business like ours, so whatever your background, you’ll fit right in.
We are committed to providing reasonable support or adjustments in our recruiting processes for candidates with disabilities, long term conditions, mental health conditions, or who are neurodivergent or require pregnancy-related support. If you need support, please reach out to careers@scottishpower.com.
Contact Details:
Iberdrola Energie Deutschland GmbH Recruitment Team
StudySmarter Expert Advice🤫
We think this is how you could land Risk + Governance Lead in Glasgow
✨Join Compliance Communities
Get involved in compliance and risk communities — both online and offline. Look for forums, LinkedIn groups, or even local meetups where compliance pros hang out. You never know who might drop a job opportunity your way!
✨Attend Industry Conferences
Keep an eye out for compliance and risk management conferences and workshops in your area. These events are a goldmine for networking, and they often have job boards or recruiters on-site looking for new talent. Plus, it’s a chance to learn what's trending in the field.
✨Leverage Your University Career Services
If you’ve recently graduated or are still studying, head over to your university's career services. Many companies, including those in compliance, actively recruit fresh talent through these services, so make sure you tap into that resource.
✨Showcase Your Knowledge Online
Start writing articles or blog posts about compliance topics that interest you. Share them on platforms like LinkedIn to demonstrate your knowledge and passion. This not only builds your presence in the field but can also catch the attention of companies like Iberdrola Energie Deutschland GmbH looking for candidates who are engaged and informed.
We think you need these skills to ace Risk + Governance Lead in Glasgow
Some tips for your application 🫡
Show Your Understanding of Compliance:In the compliance-risk field, it's super important to showcase your understanding of regulations and risk management frameworks. Highlight any relevant coursework, certifications (like ICA or AML), or even projects that demonstrate your knowledge and commitment to this area. We want to see how you can navigate this complex landscape!
Quantify Your Achievements:When detailing your experience, try to quantify your achievements. For example, if you've previously worked on a project that improved compliance metrics or reduced risk exposure, give us the numbers! This data-driven approach really stands out to hiring managers in compliance-risk roles.
Tailor Your CV to Reflect Relevant Skills:Make sure your CV highlights skills that are particularly relevant to compliance, like attention to detail, analytical thinking, and report writing. Ensure these are easy to spot – consider using bullet points to break down your responsibilities and achievements for maximum impact!
Craft a Motivating Cover Letter:In your cover letter, let us know why you’re excited about the compliance-risk role at Iberdrola Energie Deutschland GmbH. Share what motivates you about compliance, and how you believe you can contribute to our mission. This is your chance to showcase not only your skills but also your passion for this important field!
How to prepare for a job interview at Iberdrola Energie Deutschland GmbH
✨Master the Regulations
Brush up on key compliance regulations relevant to the industry you're applying to. Familiarising yourself with specific laws and frameworks used in your field will give you an edge during technical questions. Show that you’re not just aware of them but can also apply them—think real-life scenarios!
✨Show Your Analytical Skills
Compliance roles really focus on analytical skills, so be prepared for case studies or situational questions during the interview. We've got to demonstrate how we approach risk assessments or compliance audits, possibly drawing on examples from past experiences or university projects. Bring some thoughtful case scenarios to discuss!
✨Know Your Tools
Get comfortable with commonly used compliance software and tools. Familiarity with platforms like RSA or MetricStream can really impress during your interview, as it shows you're ready to hit the ground running. If you’ve had any experience with them, make sure to highlight that!
✨Align with Company Culture
Since it's a full-time position, show your long-term commitment and interest in the company’s mission and values. Dive into how your ethics and professional philosophy align with Iberdrola Energie Deutschland GmbH’s stance on compliance. A shared vision can really resonate with interviewers looking for fit as much as skill!
