IT/OT Cyber Security Manager
Role details
Job location
Tech stack
Job description
The SSE Networks Distribution cyber security team are responsible for the implementation of security processes and standards within the SSE Networks Distribution business. The team is principally concerned with threats to the digital systems that keep the lights on (Operational Technologies), however also acts as a single point of contact for broader cyber security queries and risks that affect the business. This includes leading the secure by design process for SSE Networks Distribution projects (both major capital build and digital projects), monitoring our systems and providing assurance of the efficacy of our existing security controls.
This role will lead a team of security engineers and security architects to ensure proportionate security requirements are set for projects and then providing support to those projects to implement and test the associated security controls. Projects will range from new build control rooms, substations, network and SCADA replacements through to new condition monitoring and asset management systems.
You will
Lead the SSE Networks Distribution security engineering team (Approx permanent 8 Security Engineers and Officers plus additional contracted resource), managing workload, developing individuals and building a trusted expert capability.
Provide a technical oversight of the overall security architecture within SSE Networks Distribution to avoid gaps where interfaces exist between individual and team responsibilities.
Continually improve our security standards so expectations around security are clear and achievable. Work collaboratively with the Group Cyber Defence team to adopt common patterns and recommend improvements to group policies/standards.
Make risk-based decisions to ensure security standards are proportionate and are balanced against other business drivers such as delivering a network for net zero. Log and manage risks as appropriate and track any controls that require to be implemented.
Provide support to the wider security team to grow our overall security capabilities and meet requirements from the Network and Information Systems (NIS) Regulations 2018, National Cyber Security Centre's (NCSC) Cyber Assessment Framework (CAF) and enhanced CAF (eCAF).
Requirements
Experience setting, implementing and testing security controls/requirements aligned to recognised international standards within an Operational Technology and an IT environment, with direct experience securing systems across all Purdue levels.
Experience managing a team of technical experts including: performance management, development planning, mediating differences of option.
Evaluating the risks associated with control weaknesses across multiple systems to make clear recommendations for mitigation or acceptance for a leadership or non-technical audience.
Experience working within an electricity SSE Networks Distribution or other regulated utility (Desirable)
Recognised academic qualifications covering a STEM subject and relevant cyber security certifications for operational technology. (Desirable)
Benefits & conditions
Pulled from the full job description
- Employee discount
- Gym membership
- Private medical insurance
- Cycle to work scheme
- Discounted gym membership, Base Location: You'll be expected to spend 50% of your working week in one of the following locations : Reading/Forbury Place, Havant/Penner Road, Perth or Glasgow
Salary: £68,100 - £102,100 + car /car allowance - if applicable + performance-related bonus + a range of benefits to support your finances, wellbeing and family.
Working Pattern: Permanent | Full Time | Flexible First options available, Enjoy discounts on private healthcare and gym memberships. Wellbeing benefits like a free online GP and 24/7 counselling service. Interest-free loans on tech and transport season tickets, or a new bike with our Cycle to Work scheme. As well as generous family entitlements such as maternity and adoption pay, and paternity leave.