Security officer Mon-Fri



Job Overview

-To protect our customer's property, people and/or assets by providing security services in direct accordance with the sites published Assignment Instructions (AI's) and any subsequent changes.

-Delivering results that meet and / or exceed the Key performance indicators / Service Level Agreement for the customer through full responsibility and accountability, providing a service that aids in the retention of the contract.

-To undertake additional training to ensure continuous self-development.

Main Duties

Operations

-To be aware of and ensure compliance with all aspects of policies and relevant legal and regulatory requirements as directed by the Security Account Manager and in accordance with UK Law and Guidance bodies.

-Fully and satisfactorily complete all of the tasks and duties on site as defined within the published Assignment Instructions (AI's).

-Proactively refer to and review the published Assignment Instructions, thus familiarising oneself with any changes in order to suggest additional amendments that will improve or enhance the current level of service.

-To be compliant with Industry and Statutory Legislation (you are required to obtain a front-line licence in either Security Guarding or Door Supervision), which must be worn at all times whilst carrying out your duties. The Customer also requires a CCTV PSS SIA Licence. There are also additional courses that are contractually required.

-Comply with legal obligations and safety requirements of the role.

-Follow instructions and procedures appropriately without unnecessarily challenging authority.

-Work in a systematic, methodology and orderly way.

Training

-Fully and satisfactorily complete all required competency training.

-To undertake additional training to ensure continuous self-development as directed by the Security Account Manager.

-Use technology to achieve key work objectives and develop job knowledge and expertise through continual professional development.

-You are required to ensure you renew your licence 16 weeks before expiry.

Security and Health & Safety

-Look out for, and to immediately report, any Health & Safety hazards, or potential hazards, on site.

-Stay alert to any threats or changes within the work environment in order to take the appropriate action to reduce the chance of disruption, loss or damage.

-Use common sense and initiative by immediately involving others if a situation appears to become threatening.

-To maintain professional conduct in the face of difficult situations and challenging customers.

-Complete an accurate, detailed notebook entry as soon as possible after any incident, which can then be used as part of the Incident Report process.

-Keep to schedules and demonstrate commitment to Mitie and the Client.

-To ensure check calls are being carried out at the allocated time slot as stipulated in the Assignment Instructions (AI's).

-To call emergency services and Communication Centre to report all incidents.

What we are looking for

-Previous Security Experience

-SIA License

-SC Clearance desirable

Security Officers required to work 4 on 4 off days and nights , with a payrate of £12.25



We are looking for dependable and courteous officers who can work within the local community.



Do you:

Have a passion for providing excellent service?

Respect diverse cultures and beliefs?

Do you have at least two years of security experience? Hold a valid SIA certification?

If so, you might be the perfect candidate for an exciting opportunity with Mitie.



As a Community Security Officer, you are responsible for protecting the property, people, and assets of our clients whilst working in locations that may have religious beliefs that are different from your own, therefore you will need to be sensitive to their needs and expectations.



The role also requires you to interact with children, vulnerable adults, and people who may have limited English language skills, therefore you will need to adjust your interaction accordingly.



Main duties

Positive point of contact for visitors and colleagues, providing "at point of need" support and ensuring a safe and welcoming environment.

Manage security or safety incidents, report and respond to any identified threats, and consult with our clients, colleagues, and visitors to improve their safety.



Perform building and property patrols, health and safety incident management, access control, first aid, lost property management, and other duties as required.



If you are interested in this exciting opportunity, please apply online with your CV and a cover letter



What we are looking for

Previous Security Experience

SIA License



Mitie offer a wide range of benefits, as well as opportunities for career development and progression. We are an equal opportunities employer and welcome applications from all backgrounds

SOC (Security Operations Centre) Level 3 Analyst

Reference Number - 79158

This SOC (Security Operations Centre) Level 3 Analyst position will report to the Cyber Security Operations Manager and will work within the Information Systems directorate based in our Crawley or Ipswich office. You will be a permanent employee.

You will attract a salary of £75,000.00 and a bonus of 7.5%. This role can also offer blended working after probationary period (6 months) - 3 days in the office and 2 remote

Close Date: 16/09/2024

We also provide the following additional benefits

• Annual Leave
• Personal Pension Plan - Personal contribution rates of 4% or 5% (UK Power Networks will make a corresponding contribution of 8% or 10%)
• Tenancy Loan Deposit scheme
• Tax efficient benefits: cycle to work scheme
• Season ticket loan
• Occupational Health support
• Switched On - scheme providing discount on hundreds of retailers products.

DIMENSIONS:

• People -Work collaboratively in a team of circa 14 permanent and temporary cyber security operations staff. Mentor Level 1 and Level 2 SOC Analysts, providing guidance and training.
• Suppliers - regular interaction with technical resources provided by the outsourced Cyber Security Managed Service provider and cyber security tooling vendors.

Principle Responsibilities:

1. Advanced Threat Hunting: analyse and assess multiple/complex threat intelligence sources and indicators of compromise (IOC) to identify new threat patterns, vulnerabilities and anomalies and, using this intelligence information and the available tooling, search the UKPN environment to find and remove 'hidden' threats, which may have initially evaded our detective controls defences.
2. Policy Development: develop and create SOC policies, technical standards and procedure documentation in consideration of current industry best practice.
3. Log Management: work with our MSSP and service owners to ensure onboarding of all log sources into the SIEM solution, create alert use cases to correlate suspicious activities across assets (endpoints, network, applications) and environments (on-premises, cloud) to identify patterns of anomalous activity.
4. Incident Response: improve security incident response playbooks and processes, lead the response to escalated security alerts and events and high-severity security incidents, provide senior level response activities such as incident tracking, communication with partners, overseeing remediation and recovery actions, reporting and applying root cause analysis and lessons.
5. Security Orchestration, Automation, and Response (SOAR): support and develop UKPN's SOAR platform, produce new workflows for automation using SOAR tools, automating our response to common attack types and enhancing operational playbooks to allow efficient correlation and enrichment of security events.
6. Digital Forensics: identify, analyse and report on serious cyber security incidents. Using experience combined with industry tools and techniques, perform forensic analysis against information gathered from multiple data sources (endpoint event logs, SIEM data, dashboards, enterprise applications, network traffic patterns), and present consistent and reasoned action and response activities to ensure threats are contained and eradicated from UKPN's network systems.
7. Cyber Crisis Scenario Testing: participate in regular cyber-attack simulation exercises to test the organisation's resilience to cyber threats and improve its cyber defences and attack preparedness.

Qualifications:

• Considerable experience (commensurate to that of a subject matter expert) in a SOC Level 2 or 3 role with evidence of advanced threat hunting and incident response.
• Must have specific SOC training or qualification or academic equivalent such as bachelor's degree in the field of Computer Science, Cybersecurity and IT, or related subject.
• Ideally hold an industry recognised information security qualification such as CISSP, AZ-500, including knowledge of industry best-practice GIAC/GCIA/GCIH, or CompTIA Advanced Security Practitioner (CASP+), Certified Ethical Hacker (CEH) and/or SIEM-specific training and certification.
• Experience or knowledge in log correlation and analysis, including chain of custody and forensics investigations and requirements.
• An understanding of compliance and regulatory frameworks such as National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF) and SO/IEC 27001/27002, GDPR, CIS, NIST.
• Working knowledge of security technologies including SIEM, SOAR, EDR, /AV, IDS/IPS, NAC, AD, DLP, Web Filtering, Email Filtering, Behavioural Analytics, TCP/IP Protocols, network analysis, and network/security applications.
• Detailed knowledge of SIEM and SOAR solutions, Identity and Access Management and Data Loss Prevention technologies preferably including FortiSIEM, Q-Radar, McAfee Web Gateway, McAfee ePolicy Orchestrator, Darktrace and Microsoft Defender. Microsoft Sentinel experience an advantage.

Are you an experienced Security Officer? Do you want more structured hours?

The Leicestershire College are looking for an experienced Security Officer to join the Estates team in providing a flexible, efficient and effective security service at all times.

The post holder requires flexibility to work a rotational shift pattern.

Working 37.5 hours per week over 5 days. The shifts are 5.45am-1.45pm or 1.45pm-9.45pm and are rotated between the team. Whilst your main days of work will be Monday-Friday, you will be required to work an occasional weekend to cover events such as open days.

Key responsibilities include regular surveillance patrols across the College campus, being a point of contact for learners, colleagues and visitors and providing a customer focused presence on site.

To be considered for the role, you will have experience of providing security and/or locking down buildings on a large site. You will be able to demonstrate a professional approach and the ability to work on your own initiative. Applicants must hold an SIA license and possess or be willing to work towards a recognised First Aid Qualification.

The College is striving to attract, develop and retain the very best people by offering a motivating and inclusive workplace in which talent is truly recognised. We are committed to promoting a diverse and inclusive community with the belief that diversity plays an important role in the success of our business.

We are proud to have achieved the Investor in Diversity award. We actively encourage applications who are current under-represented and where we are using positive action under the Equality Act. We welcome everyone to consider becoming a part of our journey. The College is striving to attract, develop and retain the very best people by offering a motivating and inclusive workplace in which talent is truly recognised.

Alongside our commitment to your professional and personal development, we also offer a generous benefits package including:

A competitive pension scheme
On-site parking
One campus facility
Subsidised nursery fees
Up to 25 days annual leave per year
Additional annual leave available
Fantastic CPD and inclusive resources for development
Well-being hours
Opportunities of volunteering within local community and charities
We offer a range of family friendly, inclusive employment policies, flexible working arrangements and agile working where the business allows. We provide staff forums, staff working groups for sustainability, staff steering groups for Investors in Diversity and support services to support with mental health and wellbeing for staff from different backgrounds.

We are and have consistently invested in providing our learners and employees with an outstanding and unrivalled range of modern facilities and resources.

The successful candidate will be employed by The Leicestershire College a subsidiary company of Loughborough College. The terms and conditions of employment offered by the Leicestershire College are different to those of Loughborough College. Please note that employees of the Leicestershire College are based at Loughborough College.

Due to the limits put upon sponsorship allocations, we are currently unable to offer sponsorship to candidates for this role. This remains under review.

If you require any support to apply for this job, please email recruitment@loucoll.ac.uk

Cyber Security Portfolio Lead

Reference Number - 78716

This Cyber Security Portfolio Lead will report to the Head of Cyber Security and Technology Risk and will work within the Information Systems directorate based in either our Crawley, London or Ipswich office. You will be a permanent employee.

You will attract a salary of £80,000.00 and a bonus of 10%. This role can also offer blended working after probationary period (6 months) - 3 days in the office and 2 remote

Close Date: 07/07/2024

We also provide the following additional benefits

• Annual Leave
• Personal Pension Plan - Personal contribution rates of 4% or 5% (UK Power Networks will make a corresponding contribution of 8% or 10%)
• Tenancy Loan Deposit scheme
• Tax efficient benefits: cycle to work scheme
• Season ticket loan
• Occupational Health support
• Switched On - scheme providing discount on hundreds of retailers products.
• Discounted access to sports and social clubs
• Employee Assistance Programme.

JOB PURPOSE:

You will be responsible for the development and management of a large portfolio of projects and programmes that are delivering enhanced cyber security technology, process and organisational change against a defined, UK Power Networks (UKPN) multi-year strategy.

DIMENSIONS:

• People - manage resources assigned to deliver projects will vary, as a minimum you will have direct management of circa 9+ permanent and temporary project resources which could rise to over 25 at peak project demand.
• Financial - shared responsibility for £1-3m annual budget covering permanent resources, tools and professional services, with governance and oversight responsibility for project/ programme budgets of approximately £80m over a 3-5 year time horizon.
• Communication - business-fluent written and spoken English language skills. Excellent verbal, written, and presentational skills to effectively synthesize and tailor communication of technically complex issues to various audiences to provide timely, balanced insights into and assurance on the health of the portfolio.
• Planning and Organisation: drive cohesion across the portfolio, identifying shared objectives, potential conflicts and common risks and work with project teams to design plans for optimizing outcomes across the portfolio. collaborating with senior partners on the prioritization of portfolio, tracking the scope, budget, and enforcing r

PRINCIPAL ACCOUNTABILITIES:

1. Transform the UKPN Cyber Security Strategy and strategic objectives into an aligned cyber security portfolio of programs, working with the Cyber Security Architecture Manager to develop the cyber security roadmap, and the Cyber Security Governance Manager on control remediation plans and assigning to teams to build and deliver the expected benefits and cyber security capability and control enhancements to the organisation.
2. Define controls and standards for projects to ensure the health of the portfolio is maintained with management of budgets, resources, risks and scope.
3. Develop portfolio-level performance metrics and provide senior management with regular, accurate management information on the portfolio status and against measurements.
4. Manage the Cyber Security Portfolio team, to ensure the quality and timeliness of services and deliverables to meet our requirements, reviewing performance and driving continuous improvement of the cyber security portfolio capabilities.
5. Collaborate with senior leaders, technical subject matter experts, operational teams and portfolio governance personnel to address issues and risks threatening the outcomes of the projects and to ensure the smooth transition of the new services into BAU operational management.
6. Accountable for the full cyber security project lifecycle, from initiation to completion, ensuring all project work for projects is delivered to agreed deadlines/schedule, meeting business objectives and financial targets.
7. Support Project Managers and Program Managers during the analysis and planning stages, driving adherence to processes, procedures, methods, and standards for program delivery.
8. Lead activities required for the realisation of the benefits of each part of the change programme, ensuring understanding of expected benefits.
9. Provide leadership to project teams, promote the adoption of industry best practice project management principles, methods and tools, govern the change control process, and assess and manage complex and material project risks.

NATURE AND SCOPE:

The Information Systems Department works across UK Power Networks, supporting us in the achievement of our vision to become the best performing DNO. The team achieve this through the provision of technology solutions and the optimisation of current solutions to improve how we operate. Continuous improvement, customer service and seamless delivery is at the heart of this ethos and are therefore strongly underpinned by effective cyber security.

You will oversee the delivery of UKPN's Cyber Security Resilience programme and project portfolio.

The Cyber Security Programme Manager will manage the cyber security roadmap across the organisation. We ask that you understand programme and portfolio management concepts, technologies, and best practices, and the ability to collaborate with other teams. You will be committed to delivering high-quality security projects that result in tangible risk reduction. You will have a track record in delivering cyber security change and transformation within critical national infrastructure or the energy-industry.

The Cyber Security Portfolio Manager's has five main functions/services.

1. Portfolio Leadership: Create clear, coherent approaches to guide effective program/project setup, execution, and control. Define a comprehensive portfolio plan, defining clear objectives, deliverables, budgets, and resource allocation. Conduct regular risk assessments and implement mitigation strategies to manage potential threats and challenges. Monitor program progress, identify potential roadblocks, and proactively initiate corrective actions. Maintain communication channels with partners, ensuring updates and transparent status reporting and progress. Operate controls and reporting standards for projects within the portfolio.
2. Value and Benefit Realisation - identify important value drivers and define metrics to monitor portfolio performance. Establish robust budget management across the portfolio and working with Finance and project teams to forecast, track, escalate and report. Support activities required for the realisation of the projected benefits of each part of the program, to deliver committed results.
3. Risk Management - identification, investigation, resolution and escalation of program issues and risks impacting project delivery to the appropriate senior partners; ensure mitigation strategies are executed.
4. Programme Management Office (PMO) - Ensuring implementation of common PMO standards, reporting, and closure process across programs. Coordinate and report programme and portfolio health, financial tracking and reporting, trend analysis for plan and budget including annual planning, quarterly/monthly forecasts.
5. CISO Office Administration - management and administration of the cyber security budget, supplier and contract management, function performance reporting, organise and coordinate team meetings and events, monitor staff development requirements. drive continuous improvement culture, govern documentation and knowledge management, training and compliance administration, recruitment and onboarding administration etc.

Your principal challenge is to translate the UKPN Cyber Security Strategy and strategic objectives into a multifaceted roadmap of tactical programs to deliver the required services, products and systems with the expected level of quality, and to the agreed schedule and cost.

SKILLS, QUALIFICATIONS AND EXPERIENCE:

• Bachelor's degree in computer science, management or Information Systems or relevant field.
• 7 years of experience managing large-scale cyber security programmes delivering all aspects of cyber security transformation - including technology, processes, and culture.
• Hold an industry recognised Project, Program, and/or Portfolio Management certification such as Portfolio Management Professional (PfMP), Program Management Professional (PgMP), Managing Successful Programmes (MSP), Project Management professional (PMP).
• Hands on experience managing programme management concepts such as resource allocation, programme/project budgets, risk management, benefits tracking, programme assurance.
• Excellent experience in leading the implementation of cyber security technologies and capabilities - including Security Operations, SIEM platforms, PAM, Vulnerability Management
• equal employment opportunity regardless of race, colour, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity workplace.

SOC (Security Operations Centre) Level 3 Analyst

Reference Number - 79158

This SOC (Security Operations Centre) Level 3 Analyst position will report to the Cyber Security Operations Manager and will work within the Information Systems directorate based in our Crawley or Ipswich office. You will be a permanent employee.

You will attract a salary of £65,000.00 and a bonus of 7.5%. This role can also offer blended working after probationary period (6 months) - 3 days in the office and 2 remote

Close Date: 23/06/2024

We also provide the following additional benefits

• Annual Leave
• Personal Pension Plan - Personal contribution rates of 4% or 5% (UK Power Networks will make a corresponding contribution of 8% or 10%)
• Tenancy Loan Deposit scheme
• Tax efficient benefits: cycle to work scheme
• Season ticket loan
• Occupational Health support
• Switched On - scheme providing discount on hundreds of retailers products.
• Discounted access to sports and social clubs
• Employee Assistance Programme.

JOB PURPOSE:

The role of a Security Operations Centre (SOC) Level 3 Analyst is to respond to high-severity cyber security incidents and escalated events and alerts then, using experience combined with industry tools and techniques, expediate a containment, eradication and recovery strategy to minimise business impact and ensure UK Power Networks' (UKPN) network systems and customer data are protected from cyber threats.

DIMENSIONS:

• People -Work collaboratively in a team of circa 14 permanent and temporary cyber security operations staff. Mentor Level 1 and Level 2 SOC Analysts, providing guidance and training.
• Suppliers - regular interaction with technical resources provided by the outsourced Cyber Security Managed Service provider and cyber security tooling vendors.
• Verbal, written and presentational skills with the ability to articulate technical cyber security concepts to technical and non-technical colleagues across different levels of seniority so that they understand the situation, and the associated risk to UK Power Networks.
• Stakeholders - Establish and maintain collaborative working relationships with internal and external technology teams and third party providers, suppliers, and partners to improve outcomes and create agreement around a course of action.

Principle Responsibilities:

1. Advanced Threat Hunting: analyse and assess multiple/complex threat intelligence sources and indicators of compromise (IOC) to identify new threat patterns, vulnerabilities and anomalies and, using this intelligence information and the available tooling, search the UKPN environment to find and remove 'hidden' threats, which may have initially evaded our detective controls defences.
2. Policy Development:develop and create SOC policies, technical standards and procedure documentation in consideration of current industry best practice.
3. Log Management:work with our MSSP and service owners to ensure onboarding of all log sources into the SIEM solution, create alert use cases to correlate suspicious activities across assets (endpoints, network, applications) and environments (on-premises, cloud) to identify patterns of anomalous activity.
4. Incident Response:improve security incident response playbooks and processes, lead the response to escalated security alerts and events and high-severity security incidents, provide senior level response activities such as incident tracking, communication with partners, overseeing remediation and recovery actions, reporting and applying root cause analysis and lessons.
5. Security Orchestration, Automation, and Response (SOAR): support and develop UKPN's SOAR platform, produce new workflows for automation using SOAR tools, automating our response to common attack types and enhancing operational playbooks to allow efficient correlation and enrichment of security events.
6. Digital Forensics:identify, analyse and report on serious cyber security incidents. Using experience combined with industry tools and techniques, perform forensic analysis against information gathered from multiple data sources (endpoint event logs, SIEM data, dashboards, enterprise applications, network traffic patterns), and present consistent and reasoned action and response activities to ensure threats are contained and eradicated from UKPN's network systems.
7. Cyber Crisis Scenario Testing: participate in regular cyber-attack simulation exercises to test the organisation's resilience to cyber threats and improve its cyber defences and attack preparedness.
8. Reporting:promote the continuous improvement of the security operations' reporting capability, including the creation and support of a reporting dashboard and the development of important security and performance metrics.
9. Security Systems and Tools Support:support the technical implementation, maintenance and configuration of the suite of security tools, products and systems to help effective prevention, detection and response to cyber threats.
10. Audit: Participate in security audits (SOC Type II and ISO 27001) and work with internal and external partners to ensure compliance with relevant regulations and standards.
11. Continuous Improvement:develop creative solutions to automate security event monitoring, detection and response, review security event/alert use cases and log correlation to propose enhancements following the changing threat landscape.

NATURE AND SCOPE:

The Information Systems Department works across UK Power Networks, supporting us in the achievement of our vision to become the best performing DNO. The team achieve this through the provision of technology solutions and the optimisation of current solutions to improve how we operate. Continuous improvement, customer service and seamless delivery is at the heart of this ethos and are therefore strongly underpinned by effective cyber security.

You will support all other team members, the rest of Information Systems team, IT Service Providers and partners across UK Power Networks to implement and improve cyber security operations capabilities.

The main measure of success for this role is upholding the IT and organisational resilience of UK Power Networks concerning cyber threats and incidents.

Qualifications:

• Considerable experience (commensurate to that of a subject matter expert) in a SOC Level 2 or 3 role with evidence of advanced threat hunting and incident response.
• Specific SOC training or qualification or academic equivalent such as bachelor's degree in the field of Computer Science, Cybersecurity and IT, or related subject.
• Hold an industry recognised information security qualification such as CISSP, AZ-500, including knowledge of industry best-practice GIAC/GCIA/GCIH, or CompTIA Advanced Security Practitioner (CASP+), Certified Ethical Hacker (CEH) and/or SIEM-specific training and certification.
• Experience or knowledge in log correlation and analysis, including chain of custody and forensics investigations and requirements.
• An understanding of compliance and regulatory frameworks such as National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF) and SO/IEC 27001/27002, GDPR, CIS, NIST.
• Working knowledge of security technologies including SIEM, SOAR, EDR, /AV, IDS/IPS, NAC, AD, DLP, Web Filtering, Email Filtering, Behavioural Analytics, TCP/IP Protocols, network analysis, and network/security applications.
• Knowledge of adversarial tactics, techniques, procedures (TTPs) and industry standard frameworks (e.g. Mitre ATT&CK).
• Detailed knowledge of SIEM and SOAR solutions, Identity and Access Management and Data Loss Prevention technologies preferably including FortiSIEM, Q-Radar, McAfee Web Gateway, McAfee ePolicy Orchestrator, Darktrace and Microsoft Defender. Microsoft Sentinel experience an advantage.
• Practical experience of developing incident response playbooks/processes, Security Orchestration, Automation and Response (SOAR), red-team exercises and tabletop crisis war games.
• Experience with security architecture and experience in investigating complex security breaches and network intrusions (e.g. state-sponsored groups or targeted ransomware attacks).

We are committed to equal employment opportunity regardless of race, colour, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity workplace.

Senior Cyber Security (GRC) Analyst

Reference Number - 79076

This Senior Cyber Security (GRC) Analyst will report to the Cyber Security Governance, Risk & Compliance Manager and will work within Information Systems based in either our Crawley or London office. You will be a permanent employee.

You will attract a salary of £55,000.00 and a bonus of 7.5%. This role can also offer blended working after probationary period (6 months) - 3 days in the office and 2 remote

Close Date: 23/06/2024

We also provide the following additional benefits

• Annual Leave
• Personal Pension Plan - Personal contribution rates of 4% or 5% (UK Power Networks will make a corresponding contribution of 8% or 10%)
• Tenancy Loan Deposit scheme
• Tax efficient benefits: cycle to work scheme
• Season ticket loan
• Occupational Health support
• Switched On - scheme providing discount on hundreds of retailers products.
• Discounted access to sports and social clubs
• Employee Assistance Programme.

JOB PURPOSE:

You will will support the Cyber Security GRC Manager in developing IT governance, risk management, and compliance strategies across UK Power Networks information systems, applications and users to safeguard essential business services and operations from cyber threats.

DIMENSIONS:

• People - Work collaboratively in a team of circa 8-10 permanent and temporary GRC resources and specialist 3rd Party GRC service providers. Mentor less experienced GRC analysts, providing guidance and training.
• Financial - no direct budget responsibility.
• Industry and Regulatory - deputise for the GRC manager to represent UKPN in energy sector industry forums and regulatory working groups, working collaboratively with Ofgem and the Department for Energy Security and Net Zero
• Communication - collaborate with all teams and partners in UK Power Networks. Good verbal, written, and presentational skills to articulate risks and the potential possible effects to the business and make reasoned recommendations for management action to mitigate or reduce the risks.
• Partners - regular and ongoing interaction with senior management partners across IT, IS and the Business; collaborate with internal support teams, internal and external auditors, specialist 3rd party service providers and partners to manage IT risk, and to monitor mitigation plans and actions.

PRINCIPAL ACCOUNTABILITIES:

1. Risk Management: Conduct cyber security risk assessments following the UK Power Networks risk assessment framework and methodology, identifying and explaining findings and treatment actions to important partners. Ensure all risks relating to the control environment are captured and remediation actions defined, tracked, monitored and followed-up with owners including communication of third-party assessments and actions.
2. Reporting: Produce management information related to the risk and control environment. Support IS teams to define important control metrics to demonstrate their effectiveness. Prepare regulatory submissions and provide assurance for UK Power Networks policy compliance within IT which includes key performance metrics and management reporting.
3. Information Security Management System Support: Operate and maintain the information security management system and artefacts, in compliance with ISO 27001/27002 including the governance forum agenda and minutes.
4. Policies and Standards: develop GRC policies, standards and procedures to monitor UKPN information security controls, exceptions, risks, and testing including management reporting on performance.
5. Controls Framework: Ensure a fit for purpose IT control environment and support a roadmap for IT controls improvements. Requiring an understanding of technical issues and controls.
6. Compliance: Design, implement, and run processes to monitor UKPN IT compliance to legal and regulatory requirements such as Smart Energy Code, Cyber Essentials, National Cyber Security Centre (NCSC) Networks & Information Systems (NIS) Regulations Cyber Assessment Framework (CAF) and all IT related audits (internal and external) where the scope is wholly relevant to the companies cyber security controls.
7. Business Continuity and Disaster Recovery:Manage IT resilience and business continuity plans, plan, coordinate test exercises. Conduct business continuity reviews and evaluate resilience and business continuity activities.
8. GRC Systems and Tools Support: support the technical implementation, maintenance and configuration of the suite of GRC tools, products and systems to ensure effective operation of GRC frameworks and capabilities.
9. Stakeholder Management: Engage and work with important partners across IT, IS and the Business, maintaining daily working relationships with internal and external support teams, internal and external auditors, UKPN regulator Ofgem, third party managed service providers and partners to manage all IT risks across the enterprise.
10. Supply Chain and 3rd Party:Engage, interact and ensure 3rd party supplies are meeting cyber security expectations. Gather evidence and assurance, risk assess and create reports and governance metrics for measuring the ongoing risk and effect that 3rd party suppliers present to UKPN.

NATURE AND SCOPE:

The Information Systems Department works across UK Power Networks, supporting us in the achievement of our vision to maintain its position as best DNO. The team achieve this through the provision of technology solutions and the optimisation of current solutions to improve how we operate. Continuous improvement, customer service and seamless delivery is at the heart of this ethos and are therefore strongly underpinned by effective cyber security.

You will support all other team members, the rest of Information Systems teams, IT Service Providers and partners across UK Power Networks to implement and improve IS and IT risk management and operational control capabilities that are important to safeguarding UKPN information assets, business services and operations.

• We ask that you understand governance, risk management, and compliance principles, in addition to knowledge of relevant laws, regulations, and industry standards. We ask that you have a detailed knowledge and practical expertise in at least 3 of the following specialist areas: -
• Specific Industry Standards
• IS/IT Operational Controls and Governance
• IT/IS Risk Management
• Business Continuity Planning and Disaster Recovery
• Supply Chain and 3rd Party Risk Management
• You will have problem solving skills to recommend pragmatic mitigating solutions to mitigate IT risks across the organisation; must also be able to develop and implement new governance and compliance strategies and practices.

Qualifications:

• Practical experience in a GRC role or related profession e.g. risk, audit, cyber security or similar practical experience in IT or OT role with a desire to move into cyber security, must have some relevant training of cyber security risk assessment.
• Detailed knowledge and experienced in defining, implementing, operating maintaining, and improving information security management systems (ISMS).
• Experience of internal and external audit engagements, orchestrating and delivering cyber security risk and control assessments and knowledge of risk processes, frameworks, and procedures.
• Specific GRC related professional training or an academic level equivalent in a related subject with a recognised information security related certification e.g. CISSP, CompTIA, CISA, CISM, CRISC, MSc Information Security, degree or other formal technical qualifications e.g. apprenticeship, in a related area e.g. networking, cyber security, Information Technology, Operational Technology.
• Knowledge of compliance, security and regulatory frameworks such as Cyber Essentials, Smart Energy Code (SEC), Network and Information Systems Directive (NIS) National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF), ISA/IEC 62443, ISO/IEC 27001/27002, GDPR, Cloud Security Alliance (CSA) Star framework, SOC2 Type 2 audits. Information Technology Infrastructure Library (ITIL), Control Goals for Information and Related Technologies (CoBIT).
• IT / OT operational risks and controls assessment and assurance
• Business Continuity Planning and Disaster Recovery testing assurance.
• 3rd Party Supply chain risks, controls and assurance.
• Experience with technical risk assessments in either Information Technology (IT) or Operational Technology (OT) environments, including Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA).
• Working within a regulated environment, preferably Energy sector Critical National Infrastructure (CNI) and an understanding of power distribution systems or industry best practice would be beneficial.

Civil Technical Sourcing & Standards Engineer

Reference Number - 76887

This Civil Technical Sourcing & Standards Engineer position will report to the Technical Sourcing & Standards Manager and will work within the Asset Management directorate based in either our Crawley, London or Bury St Edmunds office. You will be a permanent employee.

You will attract a salary of £71,914.00 and a bonus of 3%. This role can also offer blended working after probationary period (6 months) - 3 days in the office and 2 remote

Close Date: 21/04/2024

We also provide the following additional benefits

• Annual Leave

• Personal Pension Plan - Personal contribution rates of 4% or 5% (UK Power Networks will make a corresponding contribution of 8% or 10%)

• Tenancy Loan Deposit scheme

• Tax efficient benefits: cycle to work scheme

• Season ticket loan

• Occupational Health support

• Switched On - scheme providing discount on hundreds of retailers products.

• Discounted access to sports and social clubs

• Employee Assistance Programme.

Team

The Technical Sourcing & Standards team is an integral part of the Asset Management Directorate, reporting to the Director of Asset Management, and develops innovative plant, overhead line, underground cable, switchgear, transformer, protection and civil engineering standards and the technical sourcing strategies that provide the best asset solutions at the lowest life cycle cost. The team is a point of reference both within UK Power Networks and for external partners concerning all items of plant and equipment, that is intended to be connected to the electricity distribution network at all voltages from low voltage up to 132kV.

Nature and Scope

There is an opportunity for an experienced civil engineer to join the team and to become involved in the development of substation civil design standards and associated materials. The role typically includes the following:

Develop the civil design standards for internal and external use.

Specification, approval and management of the associated materials and equipment.

Visit manufacturers and suppliers to assess their ability to supply compliant equipment and materials.

Introduce new solutions to improve safety, efficiency and reduce cost.

Carry out site visits including entry to operational substations.

Build relationships with all partners.

Contribution to the team's knowledge of civil engineering.

Responsibilities

Develop civil design standards to ensure technical compliance with regulatory requirements and providing a harmonised UK Power Networks approach.

Produce high-quality technical documentation covering materials specification, design, installation, commissioning, operation, and maintenance activities.

Take ownership of associated documentation and ensuring it is current and up-to-date.

Specification, technical sourcing and approval of substation materials and equipment.

Carrying out factory audits and factory acceptance testing.

Prepare training and communication material for introducing new materials and equipment.

Carry out failure and incident investigations to initiate corrective actions and identify continuous improvement opportunities.

Resolve technical queries associated with civil materials, equipment, standards, and processes.

Contribute to our technical forums and representing UK Power Networks on relevant industry working groups.

Support other members of the team, Asset Management, and other departments including collaboration with all partners to identify our needs and opportunities.

Apply an innovative approach to all aspects of the role and introducing new ways of working.

Comply with the requirements of the designer as determined by the CDM Regulations.

Essential Qualifications

A degree in civil engineering and working towards becoming a chartered engineer.

A civil engineering background in building works within the electricity distribution or other utility sector.

An understanding of industry, national and international standards relevant to substation civil design and material specification.

An understanding of health and safety including Construction Design and Management (CDM).

An understanding of UK regulatory requirements, asset lifecycle, asset management, procurement, and equipment sourcing.

A high standard of technical writing and the able to produce concise documents.

Proficient in the use of Microsoft desktop applications

Proficient in the use of AutoCAD and the ability to develop civil and electrical engineering drawings.

Identify, and implement solutions.

Team working skills and be competent in written and oral communications at all levels.

The ability to resolve different technical engineering issues and provide relevant technical advice.

Desirable Experience

Experience in roadworks, drainage, structural steel works, cable routes, cable trenches, installation of power cables, substation buildings, structures to support outdoor distribution equipment, fences and high security features, secondary oil containment, drainage systems.

Experience in M&E services, building services, ventilations systems, fire suppression systems.

Knowledge of the Planning Application system in England.

Knowledge of distribution equipment including switchgear, transformers, overhead lines, underground cables, protection and earthing, and a willingness to develop understanding in these areas.

Development experience using SharePoint, PowerBI, PowerApps.

Development

Joining the Technical Standards & Sourcing team is an exciting opportunity, should you not possess the full range of essential skills, qualifications, and competencies detailed above, there may be an opportunity for further development to equip you. If you do not possess all relevant competencies for the core grade, it may be appropriate to appoint at a lower grade until they have developed the required competencies.

Health & Safety Responsibilities

Managers and supervisors carry both legal and company responsibilities for ensuring the health and safety of their employees, those under their control and those who might be affected by the work undertaken, i.e. public, visitors and employees of other organisations. This includes briefing individuals working for them and ensuring there is the necessary understanding, competence and application of requirements to work safely and without harming the environment.

Employees will ensure they understand the health and safety risks involved in their work activities and their responsibility to apply the controls needed to manage those risks to acceptable levels. Similarly where work activities can have an adverse impact upon the environment, and where there are legal requirements, employees will understand those impacts and the controls they must ensure are applied.

If in doubt ask!

We are committed to equal employment opportunity regardless of race, colour, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity workplace.

Are you Solicitor with experience in Commercial Litigation and/or Civil Litigation and looking for a new and exciting challenge? Our reputable client based on the outskirts of Loughborough are looking to hire a Litigation Solicitor to join their growing business.

To be considered for the role, you’ll require the following essentials:

• Qualified with a good level (3+ years) of PQE
• Good knowledge of the law and civil procedure rules relating commercial dispute litigation matters
• Experience in dealing with commercial litigation matters including commercial property disputes, shareholder and contractual disputes
• Experience within some Civil litigation is also desired within boundary disputes, contentious probate, employment law matters, fast track and multi track claims, Section 8 & 21 possession claims, misrepresentation and professional negligence claims;

The ideal candidate will be naturally self-motivated, enthusiastic and have a positive attitude towards challenges and change.

Within this Litigation Solicitor position, you’ll also be:

• Managing a varied caseload of commercial and private litigation matters
• Working diligently and accurately using of the firm's case management system
• Assisting the Head of Department
• Reviewing of documentation and legal research
• Preparing detailed advice for clients
• Drafting all legal documentation
• Working collaboratively with colleagues to promote team working
• Instructing and breifinf counsel and experts

Salary Information

£30,000 to 50,000 per annum, dependant on experience

All levels of experience will be considered.

---

Talk Staff Recruitment is an established division of Talk Staff Group and works with companies throughout the East Midlands and UK with roles including many areas such as: Accountancy & Finance, Human Resources, Marketing, Contact Centre and Office Support.

Talk Staff Recruitment act as an Employment Agency in relation to this vacancy.

See our website for more details and jobs available - http://www.talkstaff.co.uk/jobs