Information Security Officer

Preston, England, United Kingdom

12/6/2024

Electricity North West is looking for an experienced Information Security Officer to join our Information Security team based in Preston.

Our role

The primary purpose of the role is to ensure the business is compliant against security policy, acting as advisory, collaborating with stakeholders and management to improve security posture, review policies, and assist with incident, security reviews and ensure business processes comply with ENWL cyber security policy frameworks.

As the Information Security Officer your key accountabilities will be:

• To work with the Information Security Manager to undertake advisory function to the business and support the business areas to identify, reduce risk;
• To input and help to manage the cyber security compliance schedule;
• Assessing the current threat landscape, providing a realistic overview of risks and threats in the enterprise environment, supporting RFI/RFP, audits, supplier management and Projects with security lens on new suppliers, deliverables;
• Notifying and managing escalations and ensure reporting is accurate, transparent and appropriate;
• To input into security communication, awareness, and training for ENWL colleagues;
• To input into security testing procedures to verify the security of systems, networks and applications, and manage, report on the remediation of identified risks;
• The interpretation of vulnerability management platform, and penetration testing data for determination of risks.
  
  

What We’re Looking For

• Proven IT experience and experience in an information security officer role or similar risk/ security audit type role;
• A certification in Information Security Management (ISC2 CISSP, CRISK/ COMPTIA Security+ Network+);
• ISO27001 audit experience;
• IEC62443 experience.
  
  

You’ll Also Bring

• A background in an information security type role with real-world experience of reviewing policies and acting as advisory to the business on a day-to-day basis, monitoring security compliance across diverse business functions, ideally also including exposure to Operational Technology, (OT) environments;
• Experience of using a centralised application risk management platform, and business applications;
• Experience of assessing vulnerability management platform data, and interpreting attack scenarios;
• The capability to become policy subject matter expert, and provide advice and guidance across the organisation in support of security compliance against policies;
• The ability to articulate security risk simply and effectively with business managers and business stakeholders;
• An appreciation of business drivers, security tools, technologies, and security best practice;
• An understanding of information security related law and regulations such as GDPR and NIS Regulations;
• Previous experience of working within a regulated organisation, preferably Utilities, Energy sectors;
• Exposure to cyber security frameworks and standards. I.e. NCSC CAF, NIST, ISO 2700x series, CIS.
  
  

What We’re Offering

As a vital team member and in return for your expertise, inclusive approach and commitment, we'll provide a favourable salary and the chance to join a passionate and welcoming team. We are committed to ensuring our people are supported and are proud of our reward and benefits offer, which includes:

• An annual bonus scheme
• Twenty-five days annual leave increasing with length of service
• Private Healthcare
• An employee rewards portal offering discounts on several well-known brands
• A market-leading contributory pension scheme
• Employee assistance programme and opportunity for professional development through our L&D function.
  
  

We’re champions of the North West and we’re proud that it’s our electricity network that connects communities and helps keep the electricity flowing every minute of every day, from when you wake up to when you fall asleep and all the hours in between. A key part of the UK’s journey to net zero carbon is the revolution of our electricity industry and as the regions network operator, it’s our responsibility to lead the way, help the North West to decarbonise and pave the way for the growth of renewable energy. Together we have the energy to transform our communities. We are switched on. We are adaptable. We take pride.

Should you require any additional support with your application, or any adjustments please contact our Recruitment team at careers@enwl.co.uk or on 0845 366 0092 (option 2)

Any offer made will remain conditional until pre-employment checks are complete to a level deemed satisfactory by Electricity North West. Due to the of this role, the following pre-employment checks will be required; references from previous employers, BS7858 checks and a Drug & Alcohol test.

We reserve the right to close this vacancy early.

We don't accept speculative CVs from agencies. Any received we will assert ownership of the candidate and no fee will be payable.