Cybersecurity And Regulatory Compliance Manager

Salary: £68,000 - £76,0000 per annum (Dependent on skills & qualifications)

Reference: REQ3532

Do you want to be a part of an innovative and supportive team, where there are great opportunities for career progression and development?

Here at SGN we are currently looking for a Cybersecurity and Regulatory Compliance Manager who will ensure that SGN is compliant with all relevant regulations, including the NIS Directive, the NCSC Cyber Assessment Framework and other industry-wide compliance frameworks. As the successful candidate you will manage the collation and submission of all relevant documentation to the authorities within the deadlines imposed. You will need to develop and manage a broad range of relationships across the SGN business as well as with OT and IT teams, and with external regulatory bodies and industry peers. Due to the complexity of the SGN environment and the frequently changing regulatory requirements, the ideal candidate will need to be able to think both strategically, for long-term effective management of compliance, and tactically in order to deliver our input to OFGEM processes in a timely manner.

What will you be doing day to day?

• Ensure that the organisation complies with legal and Regulatory requirements.
• Analyse changes in legislation or regulation and assesses impact on our own or client's organisation. Provide advice on the implications of legislation and regulation on the business, seeking legal advice where necessary.
• Take responsibility for and ownership of submission of annual reports to the regulatory body, liaising with all stakeholders to ensure input is of the highest quality.
• Support creation and completion of Re-opener documentation to support funding for future years of the RIIO2 & RIIO3 programme.
• Lead on regulatory audits and inspections to ensure that the company provides the relevant and accurate input regarding its IT and OT estate.

What you’ll need

• The individual should be educated to degree level in a relevant discipline. Must be one of CISM/CISSP/CISA/TOGAF/CRISC.
• Must have demonstratable cyber security experience.
• Must have proven expertise in Compliance Management, Information Security Risk and Audit.
• Excellent understanding and hands-on experience of working with Regulators and providing compliance updates for an OT environment.
• Excellent understanding of the NIS Regulations and the NCSC Cyber Assessment Framework.
• Good understanding and practical experience of Cyber Security Frameworks and standards such as NCSC security principles, NIST Framework, ISO 27001, ISO27005, IEC62443 etc.
• Excellent command of written English.
• Strong interpersonal and relationship building skills.
• Role will require Security Clearance.

If you don’t have all the qualifications, we would still love to hear from you… we provide our own specialised learning and development programs, providing access to learning tools to help you acquire the skills needed to excel in our environment.