Information Security Officer at SmartestEnergy

Ipswich, England, United Kingdom -

Full Time

Start Date

Immediate

Expiry Date

06 Aug, 26

Salary

70000.0

Posted On

08 May, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

ISO 27001:2022, Governance, Risk Management, Compliance, Internal Auditing, Risk Assessment, Supplier Assurance, EU GDPR, ISO 27005, CIS Framework, Information Security Auditing, Policy Development, Incident Readiness, Data Protection Act, Security Control Solutions, Business Resilience

Industry

Utilities

Description

Join us in a pivotal role at the heart of our global Information Security function, where you will shape and strengthen the organisation’s ISO 27001:2022 Information Security Management System across an global business landscape. As a Subject Matter Expert, you will drive governance, risk management, compliance, and security best practice while influencing strategic initiatives that enhance business resilience and support secure growth. Working closely with stakeholders across Technology, Risk, HR, Compliance, and Operations, you will play a key role in embedding a strong security culture and ensuring alignment with Smart Energy, Retail Energy, and Marubeni security requirements. This is an exciting opportunity for an experienced Information Security professional who thrives in a collaborative, fast-paced environment. You will lead policy development, internal audits, risk assessments, incident readiness, and supplier assurance activities, while supporting major business initiatives including global expansion and transformation projects. What skills/experience do I need to be successful? A strong background in information security assessing, advising, and auditing the deployment of security control solutions to match global security standards; Holding related InfoSec certifications (ISO 27001:2022 Lead Auditor / Practitioner, CISM, CISSP, CRISC etc); Good understanding of the Data Protection Act and implementation of EU GDPR; Understanding of the principles of ISO 27005 risk assessments and risk treatment, including operational risk as well as compliance monitoring and reporting; Relevant Information Security Control Frameworks such as ISO 27k and CIS. What sets us apart? Global Impact: With offices in the UK, US, and Australia, and plans for further expansion, you'll be part of a dynamic, globally-minded team, with opportunities to explore new markets and make a difference on a global scale. Flexible Working: Embrace the freedom to work from anywhere in the world for up to 30 days a year. We prioritize work-life balance, recognizing that your well-being matters. Find out more here. Commitment to Diversity and Inclusion: We celebrate our diverse culture and value individuals irrespective of background, disability, religion, gender identity, sexuality, or ethnicity. Join a team where diversity is not just welcomed but celebrated as a key driver of growth and innovation. What happens next? Once we receive your application, it will be reviewed by a human – no bots here! The average process typically takes around 2-3 weeks, with 2 stages of video interviews using Teams. However, this can vary depending on the role. We may invite you for a face-to-face meeting or require only 1 video interview. If you have any questions or need support, our Recruitment Team is here to assist you. Ready to join us on our journey to digitise, decarbonise, and localize the future of energy? Apply now. We're committed to making the application process easy and comfortable. Let us know how we can help you with any reasonable adjustments that can be tailored to your needs. At the bottom of each of our adverts you can find one of our recruitment teams' contact details. Please reach out so we can discuss with you further. Check out all our current open positions Our privacy policy is here

Responsibilities

The role involves shaping and strengthening the organization's ISO 27001:2022 Information Security Management System across a global landscape. Key duties include leading policy development, internal audits, risk assessments, and ensuring alignment with security requirements across various business functions.