Risk & Controls Analyst; Cyber & Technology

Base

Location:

You'll be expected to spend 50% of your working week in one of the following locations:
Glasgow, Perth, Reading or Havant.

Salary: 36,200 - 54,400 + performance-related bonus and a range of benefits to support your finances, wellbeing and family.

Working Pattern:
Permanent | Full Time | Flexible First options available

The role

The Cyber & Technology Risk & Controls Analyst supports the Cyber & Technology GRC team in the operation and continuous improvement of SSE's cyber and technology risk and control framework. The role provides high-quality analysis, coordination and administration across risk assessments, controls, assurance, issues, remediation, governance and reporting.

Working with risk and control owners across SSE, the Analyst helps maintain complete and reliable risk and control information, gathers and evaluates evidence, identifies inconsistencies or emerging themes and turns data into clear insight. The role supports IT and operational technology (OT) environments and contributes to proportionate risk management across digital, data, cloud, applications, infrastructure, identity and access, third parties, change and emerging technology.

You will Support cyber and technology risk assessments, working with colleagues to gather information, understand potential impacts and maintain clear, accurate records of risks and actions.

Help maintain effective controls, reviewing information and evidence, identifying gaps or inconsistencies and following up on actions to address control weaknesses.

Turn data into useful risk insight, analysing trends, preparing dashboards and producing clear reports that help managers and senior leaders make informed decisions.

Build positive relationships across technical and business teams, providing practical support, coordinating reviews and helping colleagues understand and apply risk and control processes.

Improve how the team works, contributing ideas, supporting changes to systems and processes and maintaining clear guidance that makes risk management easier and more consistent.

You have Experience or transferable skills in risk, controls, assurance, audit, cyber security, technology, data analysis or a related area, gained through employment, an apprenticeship, a placement or other practical experience.

Strong analytical skills and attention to detail, with the ability to review information, identify patterns or inconsistencies and reach clear, evidence-based conclusions.

Clear and inclusive communication skills, with the confidence to ask questions, explain findings in plain English and work effectively with people from different professional backgrounds.

Good organisational skills, including the ability to manage several activities, maintain accurate records, meet deadlines and raise concerns when information is incomplete.

A curious and collaborative approach, with a willingness to learn, consider different perspectives and contribute ideas that improve how risks and controls are managed.

About SSESSE’s purpose is to be restless every day until we make electricity clean, affordable and available for all.

We do this by developing, building, operating and investing in electricity infrastructure and businesses needed in the energy transition. This includes electricity transmission and distribution networks, onshore and offshore wind farms, hydro-electric power and flexible thermal generation. We also provide products and services for businesses and other customers.

Our investment plan will see SSE invest 33bn in critical electricity infrastructure to 2030.Our technology teams power growth across all SSE business areas by making sure we have the systems, software and security needed to take the lead in a low carbon world. They provide…