Cyber Security Risk and Policy Analyst

Job Description

About Us Our IT team are vital to our business in many ways. Not only do they assist their colleagues across the business by supporting and enabling everything from desktop computers and networking to managing infrastructure, they also take care of cyber securityand develop applications.How they do all that is just as important: our IT teams provide services that are bespoke, cost-effective, secure and reliable. They also look ahead to see how IT can help the business to implement strategy and be an enabler for both efficiency and success.The IT team offers a wide variety of roles and opportunities to work at the forefront of technology using the very latest toolsets. In return, their development is supported and theyre encouraged and enabled to maintain their evolving knowledge in linewith innovation.Just so you know our name is changing. From September 2022, Western Power Distribution will be known as National Grid. Were changing our name, but our people and focus on providing great service to customers remains unchanged. Were responsible for keepingthe energy flowing to communities across our region for your home or business. As part of National Grid, were now the largest electricity transmission and distribution business in the UK at the heart of a clean, fair and affordable energy future.Western Power Distribution is an equal opportunities employer, a Disability Level 1 Employer and a corporate signatory of WISE (Women in Science and Engineering) programme. Our desire is to bring in more employees from diverse backgrounds to build furtheron our inclusive culture. We value and celebrate individual difference and we believe that an inclusive culture will help the business grow as a positive, strong and innovative company. Job Introduction An opportunity has arisen for a Risk and Policy Analyst based in Exeter. In this role you will be working within the Cyber Security team, assisting in all areas of risk and policy management.As part of our hybrid working approach this role offers a mix of office and home working. Hybrid working can only be considered once your initial training is complete and subject to business need.*Please note the successful candidate may initially be appointed at a lower salary until all relevant courses and training are complete.If you are offered a position, you will be required to undertake and successfully complete a Security Check (SC). Main Responsibilities

• Policy and procedure creation and maintenance
• Assessment, documenting and tracking of cyber security risks
• Liaise on a regular basis with IT teams and with other WPD departments in relation to Cyber security work program tracking
• Maintain and be responsible for the Cyber Security Risk Register
• Assist in highlighting bottlenecks and early identification of project hold-ups that could affect agreed deadlines
• Assist in the development, collection and delivery of Cyber Security risk metrics/KPIs
• Have an understanding of WPDs business needs and company objectives
• Other technical cyber security implementation and support as required

The Ideal Candidate The successful candidate will have knowledge of Cyber Security risk frameworks and Cyber Security controls.You should have excellent communication and interpersonal skills as well as good planning and time management, strong organisational and documentation skills and an awareness of emerging technologies, threats and standards.It would be beneficial if you held the following skills, however these are not essential:

• Technical IT experience
• Experience of tracking work programs and timelines
• Awareness of cyber security standards, frameworks and regulations (e.g. NIS Regulations, ISO27001, NIST)
• Any Cyber Security or risk, audit and compliance qualifications and training

About The Company If this is your opportunity to join us, youll find we offer a supportive, rewarding and friendly working environment where youll be empowered to build a career. Along the way, youll be invested in, be enabled by the latest technology and find that werealways interested in evolving our systems and processes so that we get even better, every day.In return, youll enjoy a package of benefits designed to reward your hard work and incentivise your ambition. In addition to your competitive salary, we offer a competitive contributory pension scheme where the company will double match your pension contributionsup to a maximum company contribution of 10%. You will also have access, subject to eligibility criteria, to join our annual Share Save plan.You will receive a generous annual leave entitlement on joining, starting at 26 days rising to 28 days following 10 years service, plus 8 bank holidays. In addition, you will be able to access support via our Employee Assistance Programme, including musculoskeletaland physiotherapy services.