Information Security Officer

Abyssal S.A; Aberdeen City; On-site; GBP 80,000 - 100,000; Full time

Job summary

A leading offshore wind company in Aberdeen is seeking an Information Security Manager to ensure robust security frameworks that comply with regulations. This role involves managing ISMS, conducting audits, and driving security initiatives. The ideal candidate will possess extensive experience in information security, relevant certifications, and a collaborative attitude towards innovation. Competitive salary and opportunities for growth offered.

Benefits

Flexible working hours

Work from home opportunities

Career growth and professional development

Qualifications

• Professional certifications such as CISSP are essential.
• In-depth understanding of ISO/IEC 27001 and NIST frameworks required.
• Strong grasp of risk management principles and practices necessary.
• Proficiency in security technologies, particularly the Microsoft suite, is essential.
• Familiarity with GDPR data privacy laws needed.
• Experience in incident response and business continuity planning necessary.
• Ability to conduct security audits is critical.
• 5+ years of experience in information security is mandatory.
• Proven success in developing and implementing security policies required.

Responsibilities

• Evaluate and enforce information security policies aligning with regulations.
• Manage and improve the information security management system (ISMS).
• Integrate security controls into business operations and digital solutions.
• Support incident response planning and investigations.
• Conduct regular risk assessments and audits for vulnerabilities.
• Monitor emerging threats and update policies accordingly.
• Maintain information security documentation for audits.
• Lead compliance initiatives for legal and regulatory obligations.
• Promote security awareness and training across the organization.
• Report security incidents and audit results to leadership.

Skills

CISSP certification

In-depth understanding of information security frameworks

Strong grasp of risk management principles

Proficiency in security technologies

Familiarity with data privacy laws

Experience with incident response and disaster recovery

Conducting security audits and vulnerability assessments

Minimum 5 years of experience in information security

Track record of developing security policies

Job description

Join us as we work to unlock the value of offshore wind! JERA Nex bp is a new joint venture between JERA, Japan’s largest power generation company, and bp, one of the world’s leading energy companies. Established to unlock the potential of offshore wind across the globe, our talented team, exciting pipeline and solid capital commitment give us the potential to become one of the world’s most successful offshore wind companies.

We entered the market with a portfolio of operational and development assets, alongside the resources, capabilities and resilience to deliver offshore wind energy at scale.

Why this role matters

Ensure the security of JNBP’s Information Technology and that the security meets the expectations of both regulators and shareholders.

In this role you will

• Evaluate, design and ensure enforcement of the information security policies that align with business needs and regulatory requirements such as ISO 27001, NIST, GDPR, and relevant local regulations
• Assure the organisation’s information security management system (ISMS) is managed, extend the ISMS across the group, and drive continuous improvement to meet accreditation standards (e.g., ISO 27001:2022)
• Drive the integration of security controls into business operations and digital solutions in collaboration with Digital, O&M, legal and audit
• Oversee and support incident response planning and investigations, including coordination with legal and disciplinary processes when necessary
• Oversee that regular risk assessments and audits are conducted to identify vulnerabilities and implement mitigation strategies
• Monitor emerging threats and regulatory changes, steering to updating policies and controls accordingly
• Guarantee information security documentation and evidence is maintained as required for external audits and certification processes
• Lead compliance initiatives to ensure adherence to legal, statutory, regulatory, and contractual obligations related to information security
• Promote and where necessary lead security awareness and training across the organisation to ensure all employees understand and comply with security policies
• Ensure and consolidate reporting of incident security incidents and audits as required by leadership, shareholders and regulators

To be successful in the role you will bring

• Professional certifications such as CISSP (Certified Information Systems Security Professional)
• In-depth understanding of information security frameworks (e.g., ISO/IEC 27001, NIST)
• Strong grasp of risk management principles and practices
• Proficiency in security technologies, particularly the Microsoft suite, and zero trust security architecture
• Familiarity with data privacy laws and regulations (e.g., GDPR)
• Experience with incident response, disaster recovery, and business continuity planning
• Ability to conduct security audits, and vulnerability assessments
• Minimum 5 years of experience in information security
• Proven track record of developing and implementing security policies and procedures

What you can expect from us

Working at JERA Nex bp means being part of a global leader in offshore wind, where innovation, collaboration, and sustainability drive everything we do. You’ll enjoy:

• A collaborative and inclusive work culture, with space for team-building and social activities
• Flexible working hours and the opportunity to work from home, with regular in-person connection
• Opportunities for career growth and professional development in a fast-growing international company

As we build our company, we are driven by:

• Care for each other and our world – we leave egos at the door, are inclusive, collaborative and open to new ideas
• A spirit of ingenuity – we are pioneers and innovators making the impossible possible
• A commitment to unlocking value from offshore wind – we aim to make offshore wind sustainable, affordable and accessible to the countries & communities we serve

About JERA Nex bp

JERA Nex bp is a purpose-built offshore wind company committed to unlocking the power of offshore wind by developing high-quality, competitive projects.

A 50:50 joint venture between JERA Co. and bp, JERA Nex bp is an end-to-end developer, owner and operator with more than fifteen years of experience in operating offshore wind projects.

Headquartered in London, with offices across Europe, Asia, US and Australia, JERA Nex bp has a portfolio of operational and development projects across nine countries, and draws on a rich heritage of pioneering offshore wind in Asia Pacific and the North Sea.