Cyber Security Operations Lead

Cyber Security Operations Lead

Newington House, London or Ipswich

Benefits:

– Annual leave 25 days rising with service;
– Personal Pension Plan Personal contribution rates of 3%, 4% or 5% (UK Power Networks will make a corresponding contribution of 6%, 8% or 10%);
– Tenancy Loan Deposit scheme;
– Sick leave goes up with length of service;
– Tax efficient benefits: cycle to work scheme and childcare vouchers;
– Season ticket loan;
– Occupational Health support;
– Switched On scheme providing discount on hundreds of retailers products;
– Supplier discounts, such as O2, EE, Vauxhall cars, Universal tyres;
– Discounted access to sports and social clubs;
– Employee Assistance Programme.

JOB PURPOSE:

This role will lead the day to day management of the services delivered by our new Prime Managed Security Services partner, including Security Operations Centre and Cyber incident response services. Therefore direct experience of delivering, managing or receiving such services is strongly desired.

The Cyber Security Operations Lead will support the Head of Cyber Security and Architecture in ensuring that UK Power Networks information systems and users are adequately protected from cyber threats so to ensure continuous and effective business operations. This role will work with the IS Managed Service Providers, internal support teams and internal and external stakeholders to implement and operate cyber security systems and processes on behalf of the Head of Cyber Security & Architecture.

Ultimately, this role will support UKPN on its journey from Good to Great cyber security. Through the further embedding of cyber security into business practices and technology, this role will support UKPN in becoming recognised globally as a leading Distribution Network Operator in the field cyber security by 2019.

DIMENSIONS:

Providing support to the Cyber Security team in the security management of 5,500+ internal users, contractors and associated infrastructure and systems

Staff – 1 assigned Cyber Security Analyst, plus 3RD Party resources and multiple service providers

Budget Shared across Cyber Security Management Service Providers (£2m annual)

PRINCIPAL ACCOUNTABILITIES:

– Take the lead management responsibility for all cyber security monitoring and incident response services received from all partner organisations with particular focus on the companys prime Managed Security Services relationship

– Lead and deliver activities within the continuous programme of cyber security improvement relating to cyber security monitoring and incident response for systems and infrastructure within the enterprise IT and operation technology environment

– Support the development and implementation of UKPNs Cyber Security Strategy ensuring alignment to the company vision, values and strategic objectives

– Produce relevant and accurate cyber security metrics for both technical and business stakeholders on the performance and effectiveness of UKPNs continuous cyber security monitoring, defence and incident response capabilities

– Plan, execute and learn from regular cyber-attack simulation exercises which test the companys IT and organisation resilience measures in relation to people, process and technology capabilities resulting in actions to improve cyber defences and attack preparedness

– Lead on the gathering, analysing and reporting on threat intelligence from security partners, industry peers and UK government agencies to understand potential and relevant impacts to the company so to identify and direct the enablement of relevant cyber countermeasures and improvements

– Oversee and drive the effective root cause analysis of security incidents to ensure prompt action is taken to prevent incident reoccurrence and strengthen relevant cyber security controls

– Manage the commissioning and delivery of routine vulnerability scanning practices across the technology environment and closely support the Cyber Security Engineering Lead in tracking the implementation of remedial actions by relevant internal support teams and partners

– Mentor, develop and oversee the activities undertaken by the assigned Cyber Security Analyst

– Have ability to deputise for the Head of Cyber Security and Architecture for certain pre-agreed tasks and activities

NATURE AND SCOPE:

The Technology Department works across UK Power Networks, supporting the company in the achievement of its strategy and vision to become the best performing DNO. The team achieve this through the provision of technology solutions, as well as the optimisation of current solutions to improve how the company operates. Continuous improvement, customer service and seamless delivery is at the heart of this ethos and are therefore strongly underpinned by effective cyber security.

This role works closely with the Head of Cyber Security and Architecture, an assigned Cyber Security Analyst and all other team members, the rest of Technology team, IT Service Providers and business stakeholders across UKPN to implement and optimise cyber security arrangements.

The role blends a number of skillsets including cyber security technology assessment, design, implementation, operation, governance, change management and communications. The key measure of success for this role is upholding the IT and organisational resilience of UKPN in relation to cyber threats and incidents.

SKILLS, QUALIFICATIONS AND EXPERIENCE:

– 5 years+ experience of management of Cyber Security
– Holds an industry renowned information security qualification such as CISSP, CISM or BCS ISMP)
– Excellent verbal and written communication skills
– Experience of managing cyber security in IT environment with both internal and external service provision notably in the area of continuous cyber monitoring and incident response
– Experience of driving continuous cyber security improvements activities
– Highly self-motivated and action oriented individual with a strong results driven mentality
– Good working knowledge of ISO/IEC …… and ISMS creation / maintenance
– Establishes excellent relationships with senior colleagues and external stakeholders
– Has good commercial acumen
– A UK national suitable for completing UK Government security vetting up to SC level