ISMS OFFICER

• Location(s):
• Hythe, HAM, GB, SO45 3BP
• Cowes, IOW, GB, PO32 6JS
• Great Yarmouth, NFK, GB, NR30 3PY
• Grimsby, LIN, GB, DN31 3SY
• Little Barford, CAM, GB, PE19 6YT
• Cheshire, Cheshire, GB, CH65 1AF
• Didcot, OXF, GB, OX11 7YU

JOB REQUIREMENTS AND EXPERIENCE

• Completed university or technical college studies in computer science, mathematics, engineering, natural sciences, or a comparable education.
• Strong knowledge of OT infrastructures, application architectures, and industrial protocols such as Modbus, DNP3, OPC, and PROFINET.
• Knowledge of power plant operations and regulatory standards (CAF, ISO/27001) is advantageous; relevant certifications like CISSP or Security+ are highly desirable.
• Experienced in planning and leading projects, with high professional competence and confident, effective communication skills.
• Demonstrates above-average commitment, flexibility, resilience, and willingness to travel as required.
• Business fluent in English, with a clear team orientation and high integrity.
• Completion of SC Vetting, or willingness to undertake it.
• Brings strong interpersonal skills and the ability to work collaboratively while maintaining a professional and security-focused mindset.

We are seeking an experienced and dedicated OT security engineer to join our team at RWE, a leading power generation company. This position will focus on securing OT systems and infrastructure to ensure the safe, reliable and secure operations of our power stations. You will be responsible for protecting critical assets from cyber threats, implementing security best practices and maintaining compliances with regulatory standards. This role will require travel within the UK.

• Implement the OT Security Strategy at RWE Generation’s Mid Merit sites and deliver security improvements across these locations.
• Support site operations of the ISMS, including risk analyses, audits, selection and monitoring of measures, and effectiveness checks.
• Develop, evaluate, and adapt best practice ISMS solutions and regulations, including defining procedures, standards, and concepts.
• Translate security requirements into practical processes, technical documentation, and work instructions for site technicians.
• Report on the status of security measures, incidents, and vulnerabilities to relevant stakeholders.
• Conduct site cyber risk assessments and participate in the design of new projects to ensure secure implementation.
• Coordinate with central teams to address and resolve OT security incidents and vulnerabilities.
• Evaluate relevant attacks, technologies, and trends in OT security; advise and support plant management; and organize and deliver ISMS training and exercises for site staff.