Base Location: Havant, Reading, Perth, Glasgow
Salary: £58,100 - £87,100 + performance related bonus and a range of benefits to support your finances, wellbeing and family.
Working Pattern: Permanent | Full Time | Flexible First options available
The role
The Cyber Supply Chain Security Manager will lead the SSE Group’s supply chain cyber security service. They will drive the supply chain security strategy, risk categorisation, security contract clauses, assurance and support regulatory compliance on behalf of the Group. They will work with colleagues across all SSE Business Units and collaborate directly with suppliers to understand risks and drive actions to minimise impacts on SSE.
You will
- Lead a small team that supports the development of the supply chain security strategy, understands SSE’s supply chain ecosystem and impact on cyber security and develops and maintains procedures to ensure clear security responsibilities are operationally embedded for supply chain security and comply with the NIS regulations.
- Maintain a modern and focused set of supply chain security clauses and work with Procurement colleagues to ensure SSE has a practical supplier due diligence approach and supports complex supplier negotiations as necessary.
- Develop and execute a supplier assurance plan of assessments to confirm legislative, regulatory and SSE cyber security standards are adhered to by critical suppliers. Record operational assurance ratings and where required, drive a list of mitigating recommendations for stakeholder management and cyber risk assessment.
- Support supply chain security incidents in conjunction with the Threat, Detection & Response team.
- Deliver a supply chain through contract life assessment approach including the use of supply chain security monitoring tooling, such as Bitsight, and how tooling can be used to improve the supply chain security service.
You have
- Excellent understanding of cyber security frameworks, controls and principles involved in supply chain security and the associated risks and regulatory requirements of cyber security and data protection.
- Experience in cyber security or third party security auditing, assurance controls or similar capabilities including planning, fieldwork and reporting.
- Experience of working with commercial suppliers and the ability to negotiate vendor requirements, deal with conflict and best practice in supply chain cyber security.
- Articulate with excellent written, interpersonal and analytical skills.
- Strong influencing skills and attention to detail and the ability to effectively manage conflicting stakeholder needs.
About SSE
SSE has a bold ambition – to be a leading energy company in a net zero world. We're building the world's largest offshore wind farm. Transforming the grid to provide greener electricity for millions of people and investing over £20 billion in homegrown energy, with £20 billion more in the pipeline.
Our IT division powers growth across all SSE business areas by making sure we have the systems, software and security needed to take the lead in a low carbon world. They provide expertise, advice and day-to-day support in emerging technologies, data and analytics, cyber security and more.
Flexible benefits to fit your life
Enjoy discounts on private healthcare and gym memberships. Wellbeing benefits like a free online GP and 24/7 counselling service. Interest-free loans on tech and transport season tickets, or a new bike with our Cycle to Work scheme. As well as generous family entitlements such as maternity and adoption pay, and paternity leave.
Work with an equal opportunity employer
SSE will make any reasonable adjustments you need to ensure that your application and experience with us is positive. Please contact david.brickell@sse.com / 01738 275846 to discuss how we can support you.
We're dedicated to fostering an open and inclusive workplace where people from all backgrounds can thrive. We create equal opportunities for everyone to succeed and especially welcome applications from those who may not be well represented in our workforce or industry.
Ready to apply?
Start your online application using the Apply Now box on this page. We only accept applications made online. We'll be in touch after the closing date to let you know if we'll be taking your application further. If you're offered a role with SSE, you'll need to complete a criminality check and a credit check before you start work.
