Hybrid working between our Coventry office and home working
Permanent
Competitive salary plus bonus
At Cadent we’re excited to be part of the future of UK energy! We’ve got a clear roadmap that will both drive our performance to the forefront of our industry and support the UK government in achieving their net zero target by 2050.
We’re making a difference through innovation and new ways of working. Together we’re shaping a cleaner, greener future for our 11 million customers who we put at the heart of everything we do.
The opportunity
As our Information Security Manager you’ll support the definition of strategies, policies, processes and guidelines for how we operate and manage cyber security controls across Cadent’s networks, systems and data. You’ll be a subject matter expert in the areas of IT and security controls, defining effective KPI’s and reporting, risk, compliance and assurance. You’ll be responsible for taking the lead and provide a focal point for security and information risk matters.
Key accountabilities
• Lead a team of direct / indirect security specialists to establish risk mitigation activities, standards, policies and controls
• Define appropriate strategies, policies, standards and guidelines and controls to address threats and associated risks
• Create and implement security non-functional requirements to support business digital strategy and associated technology roadmap.
• Technical authority for decisions at both strategic and tactical levels that balances risk versus policy compliance.
• Assurance of projects to assess and mitigate security vulnerabilities.
• Workload management and allocation of assurance activities
• Internal and external stakeholder management, for example Supply Chain and Commercial for contract analysis, Regulator for compliance reporting and assurance reviews
• Reporting and tracking on solution compliance and exceptions
• Undertake risk assessments of systems based on agreed security policies, standards and industry best practise
• Lead on security incident and breach investigations in line with appropriate regulatory and legal compliance standards
What you’ll bring
We’re looking for candidate who possess the following qualifications, skills and experience:
• Proven track record of developing, implementing and operating security platforms across an enterprise network.
• Experience of completing third party security risk assessments and third party reviews.
• Experience of delivering compliance programmes for regulatory and compliance frameworks such as 27001/SWIFT/PCI DSS.
• Experience of co-ordinating internal and external reviews for security frameworks Payment Card Industry Data Security Standard (PCI DSS), NIS Directive and SWIFT.
• Thorough knowledge of IT and security controls and related principles.
• Able to demonstrate a high degree of credibility and influence senior stakeholders within the Organisation.
• Proven people management skills, with a track record of leading a team, communicating and
• collaborating effectively, managing stakeholder requirements and developing enduring professional relationships throughout the business
• Able to operate as a highly independent worker and as part of a strong team with a collaborative and informing approach.
• Prior Critical National Infrastructure (CNI) and utility industry experience preferred.
• Articulate technologist with demonstrated ability to communicate technology solutions in relevant business terms on a peer basis and at senior level
• Demonstrable knowledge of IT network features and functions, including virtual networking, principles and common practice in network security and the OSI and TCP/IP models, and the function and features of the main network appliances
• Extensive experience of cyber security within cloud networks (Azure, AWS, Salesforce)
• Demonstrable experience of defining and adapting security processes and controls to respond to both current and emerging threats and new attack techniques, hazards and vulnerabilities relevant to the network and business environment.
• Understands lifecycle and service management practices to Information Technology Infrastructure Library (ITIL) foundation level.
• Knowledge of applicable laws such as data protection, computer misuse act and copyright law.
• Proven experience of forensic processes including knowledge of criminal processes/contact with ACPO/NCCC
• Good level of knowledge of existing and emerging technologies and of industry best practice in IT development and delivery.
• Confident at managing relationships and communicating at all levels
• Delivery oriented and ability to work under pressure in a complex business environment
• Highly developed analytical skills
• High levels of initiative, professionalism, independence and resilience
• Broad understanding of the commercial and regulatory environments in which CADENT operates, and its key strategic objectives.
What’s in It For You
• 25 days holiday + statutory days + option to buy too
• Competitive salary
• Pension Scheme – double match up to 12%
• Opportunity to earn bonus
• Flex Benefits including; cycle to work scheme, salary sacrifice car scheme, insurances and healthcare packages
• My Offers membership card – offering discounts and savings from hundreds of retailers
• Support with financial wellbeing
• Access to our Occupational Health Services
Be Yourself
Cadent embraces Diversity and Inclusion. We celebrate what makes us different, as well as what we have in common. This enables us to work better as one team shaping a dynamic, innovative and inclusive culture. Our employee communities support us in keeping our employees engaged and motivated and through our partnerships and covenants we ensure our workforce reflects our communities in all their diversity.
Cadent is a Disability Confident employer so if you require any reasonable adjustments as part of our recruitment process, please get in touch and let us know. We’re also happy to discuss flexible working options should the role accommodate it.
Be part of something big – help shape the future of gas for generations to come.
Please contact [email protected] to apply for this position.