At a Glance
- Tasks: Lead our cybersecurity strategy to protect critical energy infrastructure and manage incident responses.
- Company: Join a leading organisation in the energy sector focused on high-stakes security and resilience.
- Benefits: Enjoy competitive salary, professional development opportunities, and a dynamic work environment.
- Why this job: Make a real impact in cybersecurity while collaborating with top industry professionals.
- Qualifications: Bachelor's degree in Cybersecurity or related field; 10 years of experience in cybersecurity leadership required.
- Other info: Ideal for those passionate about protecting vital infrastructure and navigating complex regulatory landscapes.
The predicted salary is between 43200 - 72000 £ per year.
We are seeking a strategic and results-driven Chief Information Security Officer (CISO) to lead our information security program in the energy sector's high-stakes, high-resilience environment. The CISO will be responsible for developing and implementing a comprehensive cybersecurity strategy to protect our critical infrastructure, operational technology (OT), and information assets. The ideal candidate will have deep experience in both IT and OT security within the energy industry and a strong understanding of regulatory and compliance frameworks.
Key Responsibilities:
- Develop, implement, and maintain a company-wide information security strategy aligned with business goals and evolving threat landscapes.
- Oversee the protection of critical infrastructure, including SCADA systems and other industrial control systems (ICS), ensuring the security of both IT and OT environments.
- Lead incident response efforts and business continuity planning for cyber-related events.
- Conduct risk assessments, vulnerability analyses, and penetration testing; manage mitigation strategies accordingly.
- Ensure compliance with industry standards and regulations (e.g., NERC CIP, FERC, ISO/IEC 27001, DOE guidelines).
- Collaborate with executive leadership, engineering, IT, and legal teams to manage security risks and integrate cybersecurity into business operations.
- Establish and enforce security policies, protocols, and procedures.
- Develop and deliver security awareness and training programs across the organisation.
- Represent the organisation in industry forums, regulatory audits, and with external partners or government agencies.
Qualifications:
- Education & Certifications: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (Master's preferred). Relevant certifications such as CISSP, CISM, GIAC, or CISA. Specialised training or certification in industrial control systems (e.g., GICSP) is a plus.
- Experience: Minimum of 10 years of experience in cybersecurity, with at least 5 years in a senior leadership role. Proven experience managing cybersecurity within the energy or critical infrastructure sector. Deep understanding of OT environments, SCADA systems, and emerging cyber threats specific to the energy industry. Experience working with federal and state regulatory agencies and managing compliance efforts.
CISO employer: SmartTek Global
Contact Detail:
SmartTek Global Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land CISO
✨Tip Number 1
Network with professionals in the energy sector, especially those in cybersecurity roles. Attend industry conferences and seminars to meet potential colleagues and learn about the latest trends and challenges in the field.
✨Tip Number 2
Stay updated on the latest regulatory requirements and compliance frameworks relevant to the energy sector. Familiarise yourself with standards like NERC CIP and ISO/IEC 27001, as this knowledge will be crucial during interviews.
✨Tip Number 3
Prepare to discuss your experience with incident response and business continuity planning. Be ready to share specific examples of how you've successfully managed cyber-related events in previous roles.
✨Tip Number 4
Demonstrate your understanding of both IT and OT security by discussing relevant projects or initiatives you've led. Highlight any specialised training or certifications you have, particularly those related to industrial control systems.
We think you need these skills to ace CISO
Some tips for your application 🫡
Tailor Your CV: Make sure your CV highlights your experience in cybersecurity, particularly within the energy sector. Emphasise your leadership roles and any relevant certifications like CISSP or CISM.
Craft a Compelling Cover Letter: In your cover letter, explain why you are passionate about information security in the energy industry. Discuss your strategic vision for cybersecurity and how it aligns with the company's goals.
Showcase Relevant Experience: Detail your experience with both IT and OT security, especially in relation to SCADA systems and compliance with regulations like NERC CIP. Use specific examples to demonstrate your expertise.
Highlight Leadership Skills: As a CISO, leadership is key. Illustrate your ability to lead incident response efforts and collaborate with various teams. Mention any training programs you've developed to enhance security awareness.
How to prepare for a job interview at SmartTek Global
✨Showcase Your Strategic Vision
As a CISO, you'll need to demonstrate your ability to develop and implement a comprehensive cybersecurity strategy. Be prepared to discuss your past experiences in aligning security initiatives with business goals and how you've adapted to evolving threat landscapes.
✨Highlight Your Technical Expertise
Make sure to emphasise your deep understanding of both IT and OT security, especially within the energy sector. Discuss specific technologies or frameworks you've worked with, such as SCADA systems or compliance standards like NERC CIP, to showcase your relevant experience.
✨Prepare for Scenario-Based Questions
Expect to face scenario-based questions that assess your incident response capabilities and risk management strategies. Think of examples where you've successfully led incident response efforts or conducted risk assessments, and be ready to explain your thought process.
✨Demonstrate Leadership and Collaboration Skills
As a senior leader, your ability to collaborate with various teams is crucial. Prepare to discuss how you've worked with executive leadership, engineering, IT, and legal teams to manage security risks and integrate cybersecurity into business operations.