IT​/OT Cyber Security Manager

Base Location

You will be expected to spend 50% of your working week in one of the following locations:
Reading/Forbury Place, Havant/Penner Road, Perth or Glasgow

£68,100 - £102,100 + car /car allowance - if applicable + performance-related bonus + a range of benefits to support your finances, wellbeing and family.

Permanent | Full Time | Flexible First options available

The SSE Networks Distribution cyber security team are responsible for the implementation of security processes and standards within the SSE Networks Distribution business. The team is principally concerned with threats to the digital systems that keep the lights on (Operational Technologies), however also acts as a single point of contact for broader cyber security queries and risks that affect the business.

This includes leading the secure by design process for SSE Networks Distribution projects (both major capital build and digital projects), monitoring our systems and providing assurance of the efficacy of our existing security controls.

This role will lead a team of security engineers and security architects to ensure proportionate security requirements are set for projects and then providing support to those projects to implement and test the associated security controls. Projects will range from new build control rooms, substations, network and SCADA replacements through to new condition monitoring and asset management systems.

Lead the SSE Networks Distribution security engineering team (Approx permanent 8 Security Engineers and Officers plus additional contracted resource), managing workload, developing individuals and building a trusted expert capability.

Provide a technical oversight of the overall security architecture within SSE Networks Distribution to avoid gaps where interfaces exist between individual and team responsibilities.

Continually improve our security standards so expectations around security are clear and achievable. Work collaboratively with the Group Cyber Defence team to adopt common patterns and recommend improvements to group policies/standards.

Make risk-based decisions to ensure security standards are proportionate and are balanced against other business drivers such as delivering a network for net zero. Log and manage risks as appropriate and track any controls that require to be implemented.

Provide support to the wider security team to grow our overall security capabilities and meet requirements from the Network and Information Systems (NIS) Regulations 2018, National Cyber Security Centre’s (NCSC) Cyber Assessment Framework (CAF) and enhanced CAF (eCAF).

Experience setting, implementing and testing security controls/requirements aligned to recognised international standards within an Operational Technology and an IT environment, with direct experience securing systems across all Purdue levels.

Experience managing a team of technical experts including: performance management, development planning, mediating differences of option.

Evaluating the risks associated with control weaknesses across multiple systems to make clear recommendations for mitigation or acceptance for a leadership or non-technical audience.

Experience working within an electricity SSE Networks Distribution or other regulated utility (Desirable)

Recognised academic qualifications covering a STEM subject and relevant cyber security certifications for operational technology. (Desirable)

SSE’s purpose is to provide energy needed today while building a better world of energy for tomorrow. We do this by developing, building, operating and investing in electricity infrastructure and businesses needed in the energy transition. Our Transforming for Growth investment plans sees us investing £33bn in critical electricity infrastructure across the five years to 2030.

Our IT division powers growth across all SSE business areas by making sure we have the systems, software and security needed to take the lead in a low carbon world. They provide expertise, advice and day-to-day support in emerging technologies, data and analytics, cyber security and more.

Enjoy…