Cyber Compliance Specialist

Overview

In this role you will support the cyber resilience and compliance program across SSE Renewables’ portfolio of energy assets. You will help establish and assure standards for operating technologies, aligning with NIS, CAF and other regulations. You will collaborate with OT, Asset Management and Operations to embed secure, compliant processes and drive continuous improvement. This is an opportunity to shape cyber risk management at scale in a mission-driven energy company.

Pay / Benefits

• private healthcare and gym discounts
• online GP and 24/7 counselling
• interest-free loans (tech and transport)
• Cycle to Work scheme
• maternity and paternity leave
• family entitlements

Responsibilities

• Maintain a regulatory compliance tracking programme for NIS and related legislation
• Develop real-time tracking and self-service reporting for CAF and other standards across SSE Renewables
• Support submissions and presentations to regulators and facilitate audits/inspections
• Provide ongoing reporting to stakeholders and leadership to foster a cybersecure culture
• Enhance OT processes and procedures with continuous improvement to reduce risks and increase efficiency

Key requirements

• Experience in assurance or compliance within a technology risk environment
• Knowledge of SCADA and other Industrial Control Systems in an OT context
• Strong analytical skills to synthesize information from multiple sources
• Regulatory compliance experience with NIS standards and CAF; knowledge of NIS2 (EU 2022/2555)
• Effective communication and stakeholder management skills
• Proficiency with Microsoft productivity applications; Power Platform experience desirable
• Security vetting to SC level is required (5 years UK residency)

• Stakeholder management
• Clear verbal and written communication
• Analytical thinking
• SCADA/Industrial Control Systems
• OT vs IT risk awareness
• NIS and NCSC Cyber Assessment Framework (CAF)

…