Incident Response Specialist - NESO

at  National Grid

KEY ACCOUNTABILITIES

Delivery

• Effectively manage higher severity cyber and physical security incidents, ensuring resilience for the future system operator and the whole energy sector.
• Develop and maintain incident response plans, processes, and supporting documentation.
• Deliver information in formal reports or as presentations and briefings to internal and external customers.
• Focus on continuous improvement and personal development.

Outreach

• Support other business departments in the development and delivery of response plans.
• Plan and deliver Security exercises to a variety of audiences up to the Silver Team .
• Take the initiative to connect internal teams with similar issues or opportunities when defining how the FSO Incident Management Team works with the wider business.
• Develop relationships with government and energy sector stakeholders to improve understanding of threat intelligence for the future system operator and the whole energy sector.
• Take active involvement in industry forums and research groups.

Subject Matter Expertise

• Develop and implement the Incident Response process effectively to ensure successful remediation and restoration in the event of a security incident.
• Understand the need for, opportunities, and limitations of response capabilities, ensuring that incident investigations are timely and effective.
• Proactively share knowledge between the Incident Management function and other teams.

ABOUT YOU

We’re evolving to become an organisation that has digital solutions in all aspects of our operations, to optimise our processes and enhance efficiency, all underpinned by firm architectural foundations. We can’t do it alone. That’s why we need curious and visionary minds like yours to join us on this transformative journey. In this case, we’re looking for someone with:

• Significant experience in incident management or associated roles
• Experience applying best practise and industry leading incident management frameworks.
• Experience in a technical discipline associated with Incident Response.
• Team player and adept at working in multi-disciplinary and diverse teams.
• Proven analytical skills and capable of solving new and complex problems.
• Excellent written and verbal communication skills with the ability to communicate the impact and importance of detailed technical information to non-technical and senior audiences.
• Managing and building relationships with customers and stakeholders.
• Ability to work with senior management.
• Mentor and support junior team members.
• Previous experience in critical national infrastructure or similar sector, involving the analysis and delivery of threat intelligence

ABOUT US

Traditionally, Britain’s energy system has been split into two areas – gas and electricity – but to ensure that Britain’s energy system is secure and affordable there needs to be co-ordination across the whole energy system, with one single entity responsible for translating policy into immediate strategy. National Energy System Operator (NESO) will bring unparalleled change.
Forge a path to a sustainable future for everyone.
Your energy, our future, together.

National Energy System Operator (NESO) is on a journey towards a sustainable and secure energy future. Together we build on this momentum, advancing the Electricity System Operator’s (ESO) plan for zero carbon operability of the electricity system by 2025.
NESO are now looking for a Cyber Security Incident Response Specialist to join us, as part of a growing new Security Incident Management team within the NESO Security department in DD&T. The team will be responsible for managing the response to Cyber and Physical security incidents, documenting lessons learnt, and developing Incident Response readiness plans and processes, alongside leading the exercise and testing programme.
The Incident Response Specialist will manage security incidents following industry best practise incident management frameworks. They will form part of the new team to establish the FSO Security Incident Response function, including the development of new governance, plans and processes
This role can be based from Wokingham or Warwick, and we continue to offer hybrid working from office and home.