Good Energy

Security Engineer

• Provide information security GRC oversight, coordination and assurance across IT security, resilience and control governance
• Act as a link between IGRC and Technology Teams
• Identify security and compliance requirements and coordinate related activity
• Provide guidance and challenge to technical owners
• Evidence controls and track remediation
• Maintain oversight of IT security risks, controls, policies and standards
• Coordinate assurance over IT security controls across people, process, premises and technology
• Validate control operation, escalate gaps and track remediation
• Interpret standards and good-practice frameworks and translate requirements into practical actions
• Support security incident response, impact assessment, evidence coordination and root cause analysis
• Coordinate oversight of IT disaster recovery arrangements, testing, dependencies and remediation
• Support IT change governance and the Good Energy Change Advisory Board
• Coordinate PCI-DSS control activity, evidence gathering, testing and remediation
• Coordinate penetration testing and support vulnerability management oversight
• Develop, review and maintain technology security policies, standards and guidance
• Support employee awareness of security responsibilities
• Report to the Head of IGRC

Information Security GRC Lead