Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Lead the development of a cyber security management system and monitor cyber risks across SSE.
- Company: Join SSE, a pioneering energy company committed to a net zero future.
- Benefits: Enjoy competitive salary, flexible working, health perks, and family support.
- Why this job: Make a real impact in cyber security while shaping the future of energy.
- Qualifications: Proven cyber security experience and strong communication skills required.
- Other info: Be part of an inclusive workplace that values diverse backgrounds and perspectives.
The predicted salary is between 50000 - 70000 £ per year.
Overview
Base Location: Havant, Reading, Perth, Glasgow
Salary: £58,100 – £87,100 + performance related bonus and a range of benefits to support your finances, wellbeing and family.
Working Pattern: Permanent Full Time Flexible First options available
The role
The role holder is responsible for leading the development and implementation of a standardised cyber security management system, and a governance and reporting mechanism to identify, measure, and monitor cyber risks consistently across the whole of SSE. This includes leading the Group\’s Principal Risk on cyber security and resilience, strategic sub risks and driving through to the tactical risks and supporting the risk management requirements of the NIS regulations.
You will
- Drive and lead the development and management of the Cyber Security & Resilience Principal Risk, risk appetite and controls framework working in conjunction with Group Risk and the IT/OT Governance, Risk & Compliance team and all Business Units.
- Lead the preparations for cyber security governance meetings across SSE and support the creation of content for cyber security papers to Board, Audit Committee and other Executive committees including development of metrics to tell the cyber security story.
- Work with GRC Risk Analyst and the reporting team to produce monthly metrics showing the cyber security risk and control position for different audiences including CISO, leaders and operational teams.
- Ensure that significant risks are identified, mitigated and effectively monitored and managed and linked to improvement plans in line with NIS requirements.
- Develop implementation guidance in relation to cyber risk appetite and define and manage policy exceptions and significant risks through appropriate risk management, exception and governance processes.
- Develop SSE\’s cyber risk assessment maturity to enable commercially informed decision-making, ensuring that risk management and the implementation of controls are guided by a clear understanding of return on investment and business value.
You have
- Excellent cyber security experience with exposure to IT and OT environments and in-depth knowledge of cyber risk assessment methods and technologies, and proficiency in performing risk, business impact, control and vulnerability assessments and assurance.
- Excellent knowledge of risks and threats to UK energy sector and security issues, techniques and implications across digital platforms, control systems and customer data.
- Demonstrable written and verbal communication skills with the ability to interact with SSE staff at all levels up to senior leadership and across all business units and organisations, and to understand business priorities.
- Ability to deliver complex messaging and data in a simple, concise manner and using data and metrics.
- Team-oriented interpersonal skills, with the ability to interface effectively with a broad range of people and roles, including IT, OT and business personnel.
About SSE
SSE has a bold ambition – to be a leading energy company in a net zero world. We\’re building the world\’s largest offshore wind farm. Transforming the grid to provide greener electricity for millions of people and investing over £20 billion in homegrown energy, with £20 billion more in the pipeline.
Our IT division powers growth across all SSE business areas by making sure we have the systems, software and security needed to take the lead in a low carbon world. They provide expertise, advice and day-to-day support in emerging technologies, data and analytics, cyber security and more.
Flexible benefits to fit your life
Enjoy discounts on private healthcare and gym memberships. Wellbeing benefits like a free online GP and 24/7 counselling service. Interest-free loans on tech and transport season tickets, or a new bike with our Cycle to Work scheme. As well as generous family entitlements such as maternity and adoption pay, and paternity leave.
Work with an equal opportunity employer
SSE will make any reasonable adjustments you need to ensure that your application and experience with us is positive. Please contact / to discuss how we can support you.
We\’re dedicated to fostering an open and inclusive workplace where people from all backgrounds can thrive. We create equal opportunities for everyone to succeed and especially welcome applications from those who may not be well represented in our workforce or industry.
Equal Opportunities Statement
SSE is an equal opportunities employer. We\’re committed to treating all employees and applicants fairly and equally, regardless of their race, gender, disability, or any other protected characteristic.
#J-18808-Ljbffr
Cyber Security GRC Risk Manager employer: SSE PLC
Contact Detail:
SSE PLC Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Cyber Security GRC Risk Manager
✨Tip Number 1
Network like a pro! Reach out to folks in the cyber security field, especially those at SSE. A friendly chat can open doors and give you insights that a job description just can't.
✨Tip Number 2
Prepare for interviews by brushing up on your knowledge of cyber risk assessment methods and the energy sector. We want to see you confidently discuss how you can tackle the challenges outlined in the job description.
✨Tip Number 3
Showcase your communication skills! Practice explaining complex cyber security concepts in simple terms. This will help you connect with interviewers and demonstrate your ability to engage with various teams.
✨Tip Number 4
Don't forget to apply through our website! It’s the best way to ensure your application gets the attention it deserves. Plus, we love seeing candidates who are proactive about joining our team.
We think you need these skills to ace Cyber Security GRC Risk Manager
Some tips for your application 🫡
Tailor Your CV: Make sure your CV is tailored to the Cyber Security GRC Risk Manager role. Highlight your relevant experience in cyber security, risk assessment, and governance. We want to see how your skills align with what we're looking for!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you're passionate about cyber security and how you can contribute to our mission at SSE. Keep it concise but impactful – we love a good story!
Showcase Your Communication Skills: Since this role involves interacting with various teams and senior leadership, make sure to demonstrate your written communication skills. Use clear and concise language to convey your ideas in your application – we appreciate straightforwardness!
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way to ensure your application gets to us without any hiccups. Plus, you’ll find all the details you need about the role and our company culture there!
How to prepare for a job interview at SSE PLC
✨Know Your Cyber Security Stuff
Make sure you brush up on your knowledge of cyber security, especially in relation to the energy sector. Be ready to discuss specific risks and threats, as well as your experience with risk assessment methods and technologies.
✨Prepare for Governance Discussions
Since you'll be leading cyber security governance meetings, it’s crucial to understand how to present complex information clearly. Practice summarising key points and metrics that tell the cyber security story effectively for different audiences.
✨Showcase Your Communication Skills
Demonstrate your ability to communicate with various stakeholders, from technical teams to senior leadership. Prepare examples of how you've successfully conveyed complex data in a simple manner in past roles.
✨Understand the Business Value
Be ready to discuss how cyber risk management ties into business objectives. Think about how you can articulate the return on investment for risk management initiatives and how they align with SSE's goals in a net zero world.
