Job Search

As Head of Cyber Security Renewables & Thermal, you will lead the strategy, governance and delivery of cyber security across a diverse portfolio of renewable and thermal generation assets. You will protect operational technology, industrial control systems, corporate platforms and critical infrastructure against evolving cyber threats, while enabling safe, reliable and resilient energy operations. Working closely with senior leaders across engineering, operations, technology, risk and compliance, you will translate business priorities into practical security measures and oversee their effective implementation.

Your responsibilities will include developing and maintaining a comprehensive cyber security strategy, standards and roadmap for generation facilities and supporting environments. You will lead risk assessments, security architecture reviews, vulnerability management, incident response readiness, threat monitoring and crisis exercises. The role will also oversee security requirements for new projects, acquisitions, suppliers and technology changes, ensuring that security is embedded throughout the asset lifecycle. You will establish appropriate performance metrics, report risk and maturity to senior stakeholders, and drive continuous improvement through audits, assurance activities and lessons learned. You will also provide leadership during significant cyber incidents and coordinate response and recovery with internal and external partners.

You will bring substantial experience in cyber security leadership within energy, utilities, industrial, manufacturing or another critical infrastructure environment, with a strong understanding of operational technology and industrial control systems. Experience managing cyber risk across geographically distributed assets, leading security programmes and influencing executive stakeholders is essential. You should be familiar with relevant security frameworks, regulatory expectations, incident management practices and third-party risk. Strong communication, decision-making and people leadership skills are required, together with the ability to balance security, operational continuity and commercial priorities. Professional certifications in cyber security, risk management or industrial control systems are desirable, as is experience working across renewable generation, thermal power or other complex energy environments.

We are seeking a Cyber Compliance & Assurance Manager to lead the development, implementation and continuous improvement of cyber security governance, risk and compliance activities. This role will help ensure that information security controls, policies and practices are aligned with relevant legislation, regulatory obligations, industry standards and organisational objectives. You will work closely with technology, risk, audit, legal and operational teams to strengthen cyber resilience and provide confidence in the effectiveness of security arrangements.

Key responsibilities will include managing cyber security compliance frameworks; coordinating internal and external assurance reviews; maintaining control libraries, risk registers and compliance documentation; and monitoring remediation plans arising from audits, assessments, incidents and control testing. You will oversee the preparation of clear reports, dashboards and management information, providing practical insight into security risks, control performance and areas requiring improvement. The role will also support policy development, exception management, third-party assurance, regulatory submissions and the delivery of security awareness and governance initiatives.

The successful candidate will have significant experience in cyber security governance, risk, compliance or assurance, with a strong understanding of recognised frameworks and standards such as ISO 27001, NIST, COBIT or equivalent. Experience conducting control assessments, managing audit activity and translating technical issues for senior stakeholders is essential. You should be confident influencing across teams, challenging constructively and managing multiple priorities in a changing environment. Strong analytical, written and verbal communication skills are required, together with sound judgement, attention to detail and the ability to turn complex requirements into practical actions. Relevant professional qualifications in information security, risk, audit or compliance are desirable.