OT Security Analyst - Resilience and Compliance

Reporting to the OT Resilience manager, the OT Security, Resilience and Compliance Analyst will support the development, implementation and assurance of the cybersecurity and resilience management systems to ensure continuous, effective and secure operation of our generating assets, in line with legislation such as the Network & Information Systems Regulations, Grid Code, EU Directive 2022/2555, etc.

Working with colleagues within the OT team, Asset Management and Operations you’ll play a key role in setting cyber security and resilience standards for Operating Technologies across SSE Renewables’ portfolio of Onshore and Offshore Wind, Hydro, Solar and Battery assets and will be critical in ensuring that relevant documented policies, standards and procedures are in place, and implement a robust assurance programme across the fleet.

You will

• Through regular stakeholder engagement, maintain a tracking programme to identify, manage and address any regulatory, audit and compliance gaps to NIS and other relevant legislation for SSE Renewables.

• Develop and maintain a system for real-time tracking and self-service reporting on the status of compliance to the National Cyber Security Centre’s (NCSC) Cyber Assessment Framework (CAF) and other suitable standards across SSE Renewables.

• Support the development of submissions and presentations to regulators, and facilitate the periodic audits and inspections.

• Provide continuous, interactive reporting to stakeholders, and senior leadership to positively influence and build consensus in support of resilient, cybersecure culture and compliance.

• Develop and enhance OT processes and procedures, implementing continuous improvement methodologies to reduce risks and drive efficiency through best practice.

Experience in assurance or compliance within a technology risk environment, preferably within the energy or other utility industry.

• Knowledge of SCADA and other Industrial Control Systems in the context of Operating Technology, and a deep understanding of the differences and similarities to conventional IT, capable of developing solutions that are fit for the unique challenges in an always-on, real time, high risk environment.

• Strong analytical skills to collate information from multiple sources and form logical judgements and conclusions based on the available facts.

• Relevant and previous experience of regulatory compliance to NIS standards and the Cyber Assessment Framework in Great Britain and knowledge of EU Directive 2022/2555 (NIS2).

• You will be an effective communicator with excellent stakeholder management skills for engaging with business and technical specialists, and for providing clear verbal, written, graphical and pictorial reporting to a variety of stakeholders. Demonstrable competence in the use of Microsoft productivity applications is essential with experience in using Power Platform for analysis and presentation of data being desirable.

Enjoy discounts on private healthcare and gym memberships. Wellbeing benefits like a free online GP and 24/7 counselling service. Interest-free loans on tech and transport season tickets, or a new bike with our Cycle to Work scheme. As well as generous family entitlements such as maternity and adoption pay, and paternity leave.

SSE will make any reasonable adjustments you need to ensure that your application and experience with us is positive. Please contact David on 01738 275846 to discuss how we can support you.