Base Location: You'll be expected to spend 50% of your working week in one of the following locations; Eurocentral, Glasgow, Perth
Salary: £44,000 - £65,900 + performance-related bonus and a range of benefits to support your finances, wellbeing and family.
Working Pattern: Permanent | Full Time | Flexible First options available
Candidates for this role will be required to obtain vetting to SC level through UK Government. The criteria normally includes 5 years UK residency, further information can be found here: United Kingdom Security Vetting: Applicant - GOV.UK (www.gov.uk)
The Role
Reporting to the OT Resilience manager, the Cyber Compliance Specialist will support the development, implementation and assurance of the cybersecurity and resilience management systems to ensure continuous, effective and secure operation of our generating assets, in line with legislation such as the Network & Information Systems Regulations, Grid Code, EU Directive 2022/2555, etc.
Working with colleagues within the OT team, Asset Management and Operations you'll play a key role in setting cyber security and resilience standards for Operating Technologies across SSER's portfolio of Onshore and Offshore Wind, Hydro, Solar and Battery assets and will be critical in ensuring that relevant documented policies, standards and procedures are in place, and implement a robust assurance programme across the fleet.
You Will
- Through regular stakeholder engagement, maintain a tracking programme to identify, manage and address any regulatory, audit and compliance gaps to NIS and other relevant legislation for SSE Renewables.
- Develop and maintain a system for real-time tracking and self-service reporting on the status of compliance to the National Cyber Security Centre's (NCSC) Cyber Assessment Framework (CAF) and other suitable standards across SSE Renewables.
- Support the development of submissions and presentations to regulators, and facilitate the periodic audits and inspections.
- Provide continuous, interactive reporting to stakeholders, and senior leadership to positively influence and build consensus in support of resilient, cybersecure culture and compliance.
