Overview
In this role you will drive supply chain security within SSE, shaping contract clauses and supporting negotiations to ensure third-party supplier compliance with cyber security standards. You will collaborate with procurement, risk, and business teams to identify cyber risks in the supply chain and guide due diligence, supplier selection, and contractual actions. You may lead or rely on partners to conduct supplier assurance reviews, recording findings and driving mitigations. You will support incident handling with the Threat, Detection & Response team and oversee day-to-day security monitoring of suppliers and onboarding/offboarding activities. This role offers hybrid work locations and a
Pay / Benefits
- flexible benefits
- private healthcare and gym discounts
- free online GP and 24/7 counselling
- interest-free loans for tech and transport
- Cycle to Work scheme
- family entitlements including maternity and adoption pay, paternity leave
Responsibilities
- Develop and embed security responsibilities in supply chain processes and contracts, aligning with NIS regulations
- Collaborate with business and procurement to assess cyber risks and support due diligence and contract negotiations with suppliers
- Conduct or oversee supplier assurance reviews to verify compliance with legislative, regulatory, and SSE standards
- Record assurance findings and drive mitigating actions for stakeholders and risk assessments
- Support supply chain security incidents with the Threat, Detection & Response team
- Oversee supplier lifecycle security including monitoring tooling, notifications, and on/offboarding activities
Key requirements
- Understanding of cyber security frameworks, controls, and supply chain risks/regulations
- Experience in cyber security or third-party security auditing, assurance, or similar activities (planning, fieldwork, reporting)
- Experience negotiating with commercial suppliers and managing supplier relationships
- Experience partnering with security operations during incidents
- Strong influencing, attention to detail, and stakeholder management skills
- influencing
- attention to detail
- stakeholder management
- cyber security frameworks and controls
- supply chain risk management
- supplier due diligence
Cyber Security Supply Chain Specialist in Portsmouth employer: Scottish and Southern Energy
SSE Thermal is an exceptional employer, offering a dynamic work environment in Perth where you can thrive as a Risk Manager. With a strong commitment to employee wellbeing, flexible working options, and a culture that promotes inclusivity and continuous improvement, SSE provides ample opportunities for professional growth while contributing to the energy transition. Enjoy competitive salaries, performance-related bonuses, and a comprehensive benefits package designed to support your financial and personal needs.
Contact Details:
Scottish and Southern Energy Recruitment Team
