Offer summary

Qualifications:

Strong background in information security with experience in assessing, advising, and auditing security controls., Relevant InfoSec certifications such as ISO 27001:2022 Lead Auditor, CISM, CISSP, or CRISC., Good understanding of the Data Protection Act and EU GDPR implementation., Familiarity with ISO 27005 risk assessments and compliance monitoring..

Key responsabilities:

Lead the development and management of the global ISO 27001:2022 Information Security Management System.

Establish and maintain governance frameworks to ensure compliance with relevant security standards.

Collaborate with stakeholders across IT, Compliance, HR, and Operations to implement information security practices.

Drive regulatory compliance and enhance overall business resilience.

Job description

We are are seeking an experienced and proactive Subject Matter Expert to lead the development and management of SmartestEnergy’s global ISO 27001:2022 Information Security Management System.

In this pivotal role, you will be responsible for establishing and maintaining governance frameworks, ensuring compliance with ISO 27001:2022, the Smart Energy and Retail Energy Codes, and Marubeni’s Information Security requirements. You will work cross-functionally with key stakeholders across IT, Compliance, HR, and Operations to embed robust information security practices throughout the business, drive regulatory compliance, and strengthen overall business resilience. This is a strategic opportunity to shape and influence the global information security landscape of a dynamic and expanding energy company.

What skills/experience do I need to be successful?

A strong background in information security assessing, advising, and auditing the deployment of security control solutions to match global security standards;
The ability to understand all aspects of the security architecture and the impact it can have on businesses / systems;
Holding related InfoSec certifications (ISO 27001:2022 Lead Auditor / Practitioner, CISM, CISSP, CRISC etc);
Experience in developing security best practice processes and controls;
Good understanding of the Data Protection Act and implementation of EU GDPR;
Understanding of the principles of ISO 27005 risk assessments and risk treatment, including operational risk as well as compliance monitoring and reporting.

What sets us apart?

Global Impact: With offices in the UK, US, and Australia, and plans for further expansion, you'll be part of a dynamic, globally-minded team, with opportunities to explore new markets and make a difference on a global scale.

Flexible Working: Embrace the freedom to work from anywhere in the world for up to 30 days a year. We prioritize work-life balance, recognizing that your well-being matters. Find out more here.

Commitment to Diversity and Inclusion: We celebrate our diverse culture and value individuals irrespective of background, disability, religion, gender identity, sexuality, or ethnicity. Join a team where diversity is not just welcomed but celebrated as a key driver of growth and innovation.

What happens next?

Once we receive your application, it will be reviewed by a human – no bots here! The average process typically takes around 2-3 weeks, with 2 stages of video interviews using Teams. However, this can vary depending on the role. We may invite you for a face-to-face meeting or require only 1 video interview. If you have any questions or need support, our Recruitment Team is here to assist you.

Ready to join us on our journey to digitise, decarbonise, and localize the future of energy? Apply now.

We're committed to making the application process easy and comfortable. Let us know how we can help you with any reasonable adjustments that can be tailored to your needs. At the bottom of each of our adverts you can find one of our recruitment teams' contact details. Please reach out so we can discuss with you further.

Check out all our current open positions

Our privacy policy is here

Required profile