Chief Information Security Officer - NESO

About the Role

National Energy System Operator (NESO) recognises the potential of bright and talented individuals, and we encourage you to join us as Great Britain’s energy system undergoes an ambitious, exciting, and vital transformation. Together with industry, we are creating a cleaner, more sustainable energy future.

NESO are currently looking for a new Chief Information Security Officer (CISO) to join us. The CISO holds a crucial leadership position in protecting both the digital and physical assets of the National Energy System Operator (NESO). This role is pivotal to developing and maintaining NESO’s security vision, strategy, operations and awareness.

The CISO is responsible for identifying and assessing cyber and physical security risk, ensuring adequate risk-based mitigation is in place for these risks either directly or working with the wider organisation. Additionally, the CISO works to preserve the organisation’s reputation and ensures compliance with NIS/CAF and other best practices/standards and is NESO NIS responsible officer.

The role works to ensure that the security strategy is forward looking and deeply embedded for NESO to achieve its overall strategy and digital ambition.

This role can be based from Wokingham or Warwick and we continue to offer hybrid working from office and home. Attendance at any NESO or partner locations based on NESO’s business requirement is expected.

• Strategic Leadership: Develop, embed, and continually refine a forward-looking enterprise-wide security strategy aligned with the organisation’s objectives, risk appetite, physical assets and digital ambition.
• Risk Management: Oversee the identification, evaluation, and timely mitigation of security risks, including those posed by emerging threats to CNI sectors.
• Security Assurance: Drive the implementation of security frameworks, policies and practices to validate the effectiveness of controls and safeguard critical business assets.
• Regulatory Compliance: Ensure the organisation’s compliance with all relevant legal, regulatory, and industry requirements (e.g., NIS Directive)
• Incident Response: Lead the development and execution of robust incident response and crisis management plans to minimise the impact of security breaches and maintain operational stability.
• Stakeholder Engagement: Primary point of contact for security matters, liaising with government agencies, regulator, and industry partners as appropriate.
• Team Leadership: Build, manage, and mentor a high-performing security team, fostering a culture of security awareness and continuous improvement across the organisation.

We’re forging the path, and we know we can’t do it alone. That’s why we need visionary minds like yours to join us on this transformative journey. In this case, we’re looking for someone who:

• Extensive experience in security, with singificant demonstrable experience in a senior leadership role, preferably within a CNI or safety critical operational environments.
• Proven track record of developing and implementing security strategies in complex and highly regulated environments.
• Proven track record of working in fast paced data, AI and technology delivery and agile devsecops environment.
• Strong knowledge of cyber security frameworks, risk management methodologies, and regulatory requirements.
• Demonstrable leadership, communication, and stakeholder management skills with a track-record of liaising at all levels of the business and externally.
• Experience in managing major incidents, crisis management, and security monitoring.
• Experience in managing Physical Security for organisations with critical assets.
• Ability to work effectively with a technology partner ecosystem and technology leaders.
• Demonstrated knowledge of industry standards and methodologies, including ISO 27001, 1779 and BS 7799, NIST.
• Current knowledge of the threat landscape and emerging security technologies.

Don’t meet every single requirement? Studies have shown that women and people of colour are less likely to apply for jobs unless they meet every single qualification. At NESO, we are committed to building a diverse, inclusive, and authentic workplace…