TL;DR

Senior Security and Risk Specialist (Cybersecurity): Taking ownership of IT risk and security controls across E.ON UK, ensuring technology, suppliers, and systems meet high standards of security, compliance, and resilience. Focus on end-to-end IT risk management, implementing robust security controls, and providing expert guidance and leadership in a complex multi-supplier environment.

Location: Hybrid, based in Nottingham, Kingswinford, or Solihull (UK)

Salary: £71,277 - £85,059

Company

E.ON is a privately owned international energy company, working daily towards improving technical innovations and user-friendly customer solutions for the new energy world.

What you will do

Lead and manage IT security risks and controls across E.ON UK, including supplier compliance and audits.
Define, implement, and maintain robust security controls in a complex multi-supplier environment.
Assess, document, and manage security risks, ensuring effective mitigation plans are developed.
Act as a security and risk champion, providing guidance and support to teams and suppliers.
Scope, commission, and interpret penetration testing activities, translating findings into actionable plans.
Collaborate with internal stakeholders (Information Security, Audit) and senior leadership to ensure consistency of controls.

Requirements

At least 5 years’ experience in IT security and architecture.
Strong experience with cloud computing technologies.
Practical knowledge of ISO 27001 and ISO 27002, including ISMS operation.
Proven track record in delivering security improvement initiatives and security awareness programs.
Experience applying industry best practice frameworks (NCSC, NIST, OWASP, SAMM, SABSA).
Demonstrable experience conducting information security risk assessments and threat modelling.

Nice to have

Experience in a multi-site, multi-vendor environment.
Knowledge of vulnerability management tools such as Qualys or Wiz.
Professional security qualifications (e.g. CISSP, ISSAP, CISM, CRISC).
Experience providing third-party security assurance during supplier selection.
Experience implementing or auditing ISO 27001, ideally as a lead auditor.

Culture & Benefits

26 days of annual leave plus bank holidays, generous pension, life cover, and bonus opportunities.
Access to 20 flexible benefits with tax/NI savings.
Industry-leading hybrid and family-friendly policies.
Commitment to diversity and inclusion (Inclusive Top 50 UK Employers, Best Employer for Women).
Support at every stage of life, including Fertility Friendly and Menopause Friendly accreditations.
Disability Confident Employer, guaranteeing interviews for disabled applicants meeting minimum criteria.