Governance, Risk Compliance Lead

Our client, an essential services operator within the utilities and technology sectors, is seeking a Cyber Security Governance, Risk and Compliance Lead for a permanent position based in London with hybrid working. The role will support regulatory engagement, cyber resilience and compliance activities, helping to ensure alignment with NIS Regulations, NIS2, Ofgem expectations, the Enhanced Cyber Assessment Framework (ECAF) and ISO 27001. Occasional travel to Belgium and Norfolk may be required.Key Responsibilities:Act as the primary point of contact for cyber security regulatory engagement with Ofgem, competent authorities, auditors and external stakeholdersCoordinate regulatory submissions, NIS self-assessments, improvement plans, evidence packs and responses to regulatory enquiries, inspections and auditsLead assurance activities across NIS Regulations, NIS2, Ofgem cyber security requirements, ECAF, ISO 27001 and other relevant resilience frameworksMonitor emerging cyber security legislation, regulatory requirements and industry guidance, assessing their impact and recommending appropriate actionsMaintain and review the Cyber Security Risk Register, ensuring threat scenarios, mitigations, treatment plans and governance arrangements remain currentSupport the governance and status reporting of the Cyber Security Roadmap, including risks, issues, actions, dependencies and third-party deliverablesDevelop and maintain a cyber security supply chain assurance programme, including ..... full job details .....