Job Purpose

Our vision is to be recognised as a world leading Security function in the energy sector and a trusted partner across National Grid businesses. As a National Grid Security Engineer, you will be a key member of the Network Security Engineering service tower. You will need to have a strong understanding of security solutioning and design processes needed to enable and securely deliver resilient cyber security services. You will work collaboratively with the Product and Architecture teams to ensure solutions and services are designed and adopted effectively. The security engineer is responsible for, but not limited to, performing maintenance and support functions associated with our security systems. You will be closely working with other members of the security team and Group IT teams to ensure continued success operation of the National Grid digital data network.

About us

As Great Britain’s electricity system operator (ESO), we sit at the heart of the electricity system, using our outstanding engineering and commercial expertise to balance electricity supply and demand. Ultimately, we keep the electricity flowing directly to where it’s needed, second by second.

Becoming the Future System Operator
In 2021, government and Ofgem jointly consulted on proposals for an expert, impartial Future System Operator (FSO) with responsibilities across both the electricity and gas systems, to drive progress towards net zero while maintaining energy security and minimising costs for consumers. In October 2023, the Energy Act 2023 was passed, legislating for this Future System Operator to be created.  

The ESO, including all of its existing roles, will be at the heart of the new Future System Operator. We will be taking on additional roles across vectors and sectors to create an organisation with a whole energy system mindset; enabling us to identify solutions to our energy system that are more sustainable, secure, and affordable for all.  

The FSO will be set up as a public corporation with operational independence from government – bringing parties together to support optimised decision making and action. As now, it will be licenced and regulated by Ofgem through price control agreements. It is anticipated that the new organisation will be up and running in 2024.

The time to act on climate change is now. As part of our team, you won’t just be touching the lives of almost everyone in Great Britain – you’ll be shaping the way we use and consume energy for generations to come.

Key Accountabilities

• Subject matter expert for management, integration and configuration of the applicable engineering discipline (e.g. SOAR)
• Experience managing large (multi-petabyte) data lakes
• Delivery of high performing low latency services
• Definition and monitoring of service level indicators and objectives to ensure platform help
• Response and problem resolution
• Capacity planning
• Change management
• Drive teams focused on Automation, automation, automation
• Hires and leads managers and technical leaders; coaches and counsels team members, and determines and manages staffing strategy and plan, consistent with the needs of the team
• Vendor relationships and relationship management
• Partner with the security incident response team to ensure customer needs are met
• Responsible for major client environmental changes including upgrades.
• Attend vendor-specific meetings and conferences for business and professional development.
• Responsible for overseeing the testing and configuring of new products and technologies.
• Assist with designing and documenting work processes within the SOC.
• Maintain expert level understanding of applicable security systems and products with ability to articulate technology and product positioning to management and technical users.
• Problem solving and troubleshooting skills support teams to resolve communication and systems issues
• Participate in special projects, as needed, and perform other duties as assigned
• Intermediate knowledge of data science disciplines including data framing and analytics.

Key Accountabilities (US Union - Internal)

• A proven information security professional with a compliance and risk management background, with experience of implementing: ISO27001/27005/31000, NIST, COBIT, ITIL etc.
• Extensive experience of developing risk management frameworks and writing statutory risk reports for governance committees and groups.
• Proven experience taking ownership of and maturing the security risk and compliance capability within an organisation.
• Demonstrable stakeholder management expertise, fostering positive behaviours and leading to successful engagement in risk and compliance activities.
• The ability to articulate, present and discuss the impact of technical and non-technical risks in the context of the organisation, to a wide-ranging audience.
• Previous security risk/compliance experience in critical national infrastructure or a similar sector, dealing with NIS Regulations and Data Protection Act.
• Degree-level qualification or equivalent combination of education and experience with strong background in Risk and Compliance
• Professional security qualifications/certifications in appropriate areas are desirable 
• An inclusive approach that creates belonging, builds trust and promotes innovation. 

Supervisory/Interpersonal- Experience Required

• Experience managing projects and programs of work
• Experience with development and delivery methodologies including Agile
Experience with DevOps team management
• Working experience and knowledge of operating systems (e.g.: Windows, UNIX/Linux) and databases
• Knowledge in various scripting and programming languages (Java, Perl, Python, C++ etc.) a plus
• Must be able to work as part of a fast-moving team
• Ability to meet deadlines, time constraints and periodic requirements
• Experience designing secure networks, systems and resilient application architectures
• Professional experience in a system administration role supporting multiple platforms and applications
• Understanding of entire technology stack of networks, databases, applications and endpoints
• Experience planning, researching and developing security policies, standards and procedures is a plus.
• Ability to learn and retain information on multiple products
• Detailed-oriented with strong communication, Interpersonal and organizational skills.

Qualifications

• Masters Degree or equivalent experience
• Typically 5 - 7 years of experience in position. Bachelors degree may be required
• Anticipates internal and/or external business challenges and/or regulatory issues; recommends process, product or service improvements. Solves unique and complex problems that have a broad impact on the business. Contributes to the development of functional strategy. Operates with little or no supervision in a complex environment.
• Establishes short and long term objectives; determines work activities to meet objectives; self supervisory.
• Recommends/implements changes in strategy which support organizational objectives.  Success depends on the ability to influence others and expresses ideas/opinions with assurance.