Information Security Lead (GRC) at octoenergy

octoenergy

London (GB)·1w ago

LeadFull-timeAWSGit

Salary Range

$146,625 - $198,375 /year

Estimated

This salary is estimated based on similar roles. The actual salary may vary.

About the Role

We are looking for an ambitious and experienced Information Security Lead to join our growing Cyber and Information Security team at Octopus Energy Group. This role involves defining what Security means at Octopus Energy Group and leading a functional team to provide world-class support services.

Key Responsibilities

→Have ownership of a functional team within the Cyber Security Team, working closely with the Head of Cyber Security to define strategic objectives and team direction
→Manage team priorities and ensures initiatives are completed within deadlines
→Collaborate regularly and effectively with the rest of the Cyber Security Team to deliver outcomes
→Lead delivery of major initiatives on clear timelines
→Build a strong culture of open communication where teammates can ask questions without fear
→Line-manage a team of Information Security Analysts in the same or similar timezone
→Set performance expectations and goals for team members
→Regularly review individual and team performance, offering actionable insights and constructive feedback
→Support team delivery and promote the automation of manual process
→Stay abreast of emerging security threats, technologies, and industry trends
→Lead maintaining and improving our Information Security Management System (ISMS)
→Promote a positive security culture and raising awareness through training and other initiatives
→Provide security advice and guidance to the wider technical team
→Liaise with stakeholders in relation to security issues and providing remediation/improvement recommendations

Requirements

✓Proven experience in a leadership role within Information Security or closely related field
✓A passion for security and a drive to make things better by harnessing technology
✓Experience in, or knowledge of, automating GRC and other security processes
✓Excellent communication, with a focus on doing this asynchronously
✓Experience of mentoring and coaching a team to perform at a high-level of quality
✓Strong analytical and problem-solving skills, with the ability to identify and mitigate security risks
✓A good understanding of information security principles
✓Experience producing or supporting the delivery of security awareness programs
✓The ability to demonstrate the relevance and importance of security controls
✓Knowledge of industry and regulatory security standards, such as ISO 27001, SOC2, and GDPR