SSES Cyber Security Lead

Location: London Employment: Permanent, full-time Salary: 80000 Posted Date: 04 Sep 2026 Closing Date: 18 Sep 2026

We’re looking for an experienced SSES Cyber Security Lead (Grade 12) to join our Information Security team and play a pivotal role in shaping the cyber security arrangements underpinning the UK’s future energy markets.

This is a senior subject matter expert role, providing independent, authoritative technical and strategic advice to the Chair of the SSES Security Governance Group and working across government, regulators, industry and Elexon.

Provide independent, authoritative cyber security advice and technical leadership to the Chair of the SSES Security Governance Group.

Lead and contribute to the development and maintenance of Threat and Risk Assessments
, ensuring cyber risks are identified, assessed and appropriately treated.

Monitor the evolving cyber security, Internet of Things and grid stability landscape, both in the UK and internationally, and assess the implications for SSES.

Identify emerging threats, risks and vulnerabilities and propose appropriate controls or approaches to ensure risks remain within tolerance.

Develop and maintain key security documentation, including Trust Modelling, Consumer Led Flexibility Security Architecture, Security Requirements and supporting guidance.

Support Ofgem with the audit and assurance regime for organisations within the scope of the load control licence, including Cyber Assessment Framework (CAF) returns and audits.

Work with Ofgem and the SSES Security Governance Group to oversee and monitor remediation activity where assurance requirements are not met.

Provide specialist cyber security expertise to SSES work groups and contribute to the development and maintenance of key security documentation.

Provide SME support on the design, assessment and delivery of industry change, particularly where new or updated standards and regulatory developments impact flexibility markets.

Advise on cyber risk, security architecture, information security standards, governance and assurance across Consumer Led Flexibility.

Provide cyber security advice and support to regulators, government and industry stakeholders.

Contribute to the development of the SSES sub-sector State of the Sector report.

Lead or contribute to strategic initiatives and technical projects across Information Security and, where required, the wider Elexon organisation.

Build and maintain strong relationships with a broad range of external stakeholders, including government departments, regulators, industry participants, technology providers and standards bodies.

Support knowledge sharing across the Information Security team and wider Elexon.

Develop consultation responses, engagement materials and other communications relating to SSES security governance.

Identify opportunities to improve Elexon’s approaches, methodologies and use of tools to strengthen cyber security and resilience.

Significant experience in Information Security management
, with a minimum of five years’ relevant professional experience.

Significant experience of Security Architecture approaches and frameworks.

Significant experience of Cyber Risk approaches and frameworks, including identifying, assessing and treating cyber threats and risks.

Significant experience of Cyber Assessment Frameworks and Cyber Resilience Audits
, ideally within the energy industry.

Extensive knowledge and practical experience of NCSC’s Cyber Assessment Framework (CAF) and the Network and Information Systems (NIS) landscape.

Extensive experience conducting or supporting Information Security audits
, including ISO 27001 certification audits.

Strong technical knowledge of domestic and international Information…