Risk & Controls Analyst (Cyber & Technology)

Company: Scottish and Southern Energy
Apply for the Risk & Controls Analyst (Cyber & Technology)
Location: Reading
Job Description:

Overview

In this role, you will support SSE’s Cyber & Technology GRC team to operate and improve the cyber and technology risk and control framework. You’ll work across risk assessments, controls, assurance, issues and governance to keep risk information accurate and actionable. You will turn data into insights, producing dashboards and reports for managers and leaders, while collaborating with cross-functional teams to strengthen risk management. The position offers hybrid work with a base location in one of Glasgow, Perth, Reading or Havant, and a clear path to contribute to SSE’s energy transition through secure technology and operations. You’ll be part of a purpose-driven team that values open, ‍

Pay / Benefits

  • private healthcare discounts
  • gym membership discounts
  • online GP
  • 24/7 counselling
  • Cycle to Work scheme
  • maternity and adoption pay / paternity leave

Responsibilities

  • Support cyber and technology risk assessments and maintain records of risks and actions
  • Review information and evidence to maintain effective controls and address control weaknesses
  • Analyze data to identify trends, create dashboards and clear risk reports for senior leaders
  • Build relationships with cross-functional technical and business teams to coordinate reviews
  • Propose improvements to risk processes and maintain clear, practical guidance for risk management

Key requirements

  • Experience or transferable skills in risk, controls, assurance, audit, cyber security, technology, data analysis or related areas
  • Strong analytical skills and attention to detail
  • Clear, inclusive communication and ability to explain findings in plain English
  • Good organisational skills and ability to manage multiple activities and deadlines
  • Curious, collaborative mindset and willingness to learn and improve risk management
  • communication
  • collaboration
  • attention to detail
  • risk assessments
  • data analysis
  • governance

…

Posted: October 17th, 2026