> Markdown version of [/jobs/ext/339634-information-security-data-governance-lead-uk](https://www.wearedevelopers.com/jobs/ext/339634-information-security-data-governance-lead-uk). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security & Data Governance Lead (UK) - **Company:** SES - **Location:** Aberdeen, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Cyber Security, Data Governance, Smartsuite, Phishing, RSA (Cryptosystem), Data Classification, Operational Systems, CIS Benchmarks, Servicenow - **Published:** June 12, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=8fae4bdbede3dd78 ## About the Role Do you have experience in ServiceNow?, Required * Significant experience in information security, cybersecurity GRC, or IT governance roles * Proven experience implementing data governance frameworks * Strong understanding of international data protection and cybersecurity regulations, * Experience working within regulated environments * Familiarity with ISO 27001, NIST, or equivalent frameworks * Experience supporting audit and compliance processes Desired * Experience in the energy, utilities, or critical infrastructure sector * Exposure to Operational Technology (OT) environments * Professional certifications (e.g., CISSP, CISM, CRISC, CISA, CDMP) * Experience with GRC tools (e.g., ServiceNow GRC, RSA Archer, MetricStream) HSE Responsibilities * Stop work by challenging and stopping unsafe acts and behaviours or unsafe conditions. * Comply with Standard Operating Procedures defined in Responsibilities above, and company STOP WORK system. * Ensure that cybersecurity considerations support safe and reliable operational environments, particularly within OT systems Competencies * Risk & Compliance Expertise: Strong understanding of regulatory and governance frameworks * Analytical Thinking: Ability to assess and mitigate complex risks * Stakeholder Engagement: Ability to influence across technical and business teams * Communication: Clear communication of technical and regulatory requirements * Autonomy: Operates independently with accountability for outcomes * Continuous Improvement: Proactively adapts to changing regulatory and threat landscapes Any Other Information * This is a senior individual contributor role with no direct reports * The role operates across multiple jurisdictions with varying regulatory requirements ## Description * Develop, implement, and maintain information and cyber security policies, standards, and procedures * Ensure alignment with recognized frameworks (ISO 27001, NIST CSF, CIS Controls) * Conduct risk assessments across IT, cloud, and Operational Technology (OT) environments * Support incident response planning and continuous improvement of security controls * Embed secure-by-design principles into infrastructure and operational systems Data Governance * Establish and maintain an enterprise data governance framework * Define and enforce data classification, handling, retention, and protection standards * Ensure compliance with international data protection regulations including GDPR, UK Data Protection Act, and applicable US privacy laws * Promote data ownership, stewardship, and accountability across business units * Support data quality, integrity, and lifecycle management Compliance & Regulatory Oversight * Ensure compliance with applicable cybersecurity, data governance, and energy sector regulations * Lead and support internal and external audit activities, including evidence collection and remediation tracking * Maintain enterprise risk registers and compliance reporting * Continuously monitor global cyber and data regulatory changes * Assess impact of regulatory developments and update internal policies, standards, and procedures accordingly * Ensure compliance is maintained across all regions of operation Cybersecurity Awareness & Training * Design and deliver enterprise cybersecurity awareness programmes * Conduct phishing simulations and risk-based awareness campaigns * Tailor training for corporate and operational (OT) environments * Measure effectiveness and drive continuous improvement in user behaviour Governance & Advisory * Act as subject matter expert and advisor on security, governance, and compliance matters * Administer and support third-party/vendor risk management programme * Provide reporting and insights to leadership on security posture, regulatory changes, and risk exposure * Contribute to the continuous improvement of governance, risk, and compliance (GRC) capability * Member of change management board and contributor to change management process ## Related Videos - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement) - [AI in Production: applied AI & enterprise use cases](https://www.wearedevelopers.com/videos/100130-ai-in-production-applied-ai-enterprise-use-cases) - [Skynet wants your Passwords! The Role of AI in Automating Social Engineering](https://www.wearedevelopers.com/videos/770-skynet-wants-your-passwords-the-role-of-ai-in-automating-social-engineering) ## Related Articles - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)