Business Information Security Officer

SSE has big ambitions to be a leading energy company in a low carbon world. Following our commitment to invest £20.5 billion in low carbon projects to 2027, we have significant growth plans and are well on our way to achieving our ambition to build a world that's more sustainable and inclusive for you, your family, the community you live in and for generations to come.

This role is within our Networks Distribution IT team leading our Cyber Programme, and supporting our Digital Strategy and Vision to be a progressive secure network owner, using digital to enhance social and economic value, deliver a leading experience for our customers and to enable the energy system to support net zero carbon emissions, whilst maintaining our regulatory driven secure systems across the IT and OT estates.

Join us on our journey to net zero and help us power change.

**About the Role**:
**Base Location**: Reading, Havant, London, Glasgow or Perth

**Salary**: £74,600 - £112,000, car allowance, performance-related bonus and a range of benefits to support your finances, wellbeing and family.

**Working Pattern**: Fixed Term Contract or Secondment | Full Time | Flexible First options available

The Business Information Security Officer (BISO) will serve as the primary point of contact between the Group Cyber Security function and their assigned business unit. The BISO is responsible for the delivery of the Business Unit Cyber Programme covering both IT and OT, driving compliance with the Regulatory Environment and the day-to-day cyber security operations in the BU. They will also be responsible for the Cyber Service and Continuous Improvement within the Business Unit and will support the progression of cyber security awareness, behaviours and culture in the Business Unit.
- Oversee and deliver the Business Unit Cyber Programme to the agreed regulatory and compliance standards, within the approved regulatory budget allowance, and meeting the Business Unit quality and efficiency goals.
- Follow all risk remediation protocols to ensure issues are mitigated, risks are accounted for and exceptions are tracked in accordance with frameworks, policies and standards set by the organization.
- Work with BUs to align funding requirements with strategic initiatives.
- Support BU with cyber regulatory matters including NIS compliance.
- Educate stakeholders on cyber security-related matters in an effort to increase awareness and improve culture.

**What do I need?**:
To be considered for this role, we would love you to have:

- Experience working in risk management, governance, and regulatory requirements related to cyber security with a specific focus on business outcomes and service delivery.
- Experience in working with and preferably leading a cross functional team.
- Experience of cyber security regulation ideally Network & Information Systems (NIS).
- Certified at Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) level.

**About our Business**:
SSE IT underpins the technology needs of all the different businesses that make up the SSE group. From emerging technologies to data and analytics to cyber security - we power SSE's growth and enable it to generate value, while keeping it secure. As a trusted business partner that helps SSE lead in a low carbon world, we are proud of our service. Working for SSE IT is all about equipping SSE for now and the future.

**What's in it for you?**:
We offer an excellent package with 34 days annual leave entitlement. Enhanced maternity/paternity leave, discounted healthcare, salary sacrifice car leasing and much more, view our full benefits package on our careers site.

**Further actions**:
Before commencing your role with SSE, you'll need to complete our pre-employment screening process. This will consist of a criminality and credit check.

LI-DB1

LI-Hybrid