Operational Technology (OT) Risk and Compliance Specialist Flexible location – Glasgow, Ipswich, London, Northampton or Selby Hybrid working Permanent, full time
Closing date: Friday 2nd May 2025
Who we are We’re not just talking about making a difference, we’re making it happen. Wegenerate dispatchable, renewable power and create stable energy in an uncertainworld. Building on our proud heritage, we have ambition to become the globalleader in sustainable biomass and carbon removals.
You’ll be joining our teams of practical doers, future thinkers and businesschampions. We’re enabling a zero carbon, lower cost energy future for all, andworking hard to decarbonise the planet for generations to come.
About the role
This is a security risk and compliance-based role, reporting into the OT Riskand Compliance Manager. You’ll be part of the Information Security, Governance,Risk and Compliance Team (IGRC) but will work closely but with a wide varietyof business stakeholders including Security and Operational teamscross-functionally.
You’ll assist in the delivery of Security Policy, Data Classification, andCompliance Management in accordance with business and regulatory requirements.This role will help to further develop compliance knowledge and skills throughthe rollout of tools, policies and procedures, working with individual ProjectTeams and Asset Owners to ensure that they understand their responsibilities inrelation to security risk management across the Group.
You’ll support delivery against the business strategy, the technical roadmapand the objectives set out in the Security strategy.
Additional responsibilities include:
– Delivering against defined Security risk assessment schedules,collaborating with other authorised risk practitioners to conductrisk assessments, and maintaining accurate security risk records and riskreports. – Ensuring controls and risk treatment plans align with Security policies andstandards. – Contributing to risk review meetings and provide security representation atbusiness unit meetings and technical forums as required, effectivelycommunicating Security related risks and mitigations. – Assist in developing and improving the Group Security Risk Managementframework including the effective management of Information System &Security risk records across the Group. – Contribute to Enterprise risk reporting. – Effectively liaising with Drax teams, consultants and contractors to deliveragreed targets
Who we’re looking for Ideally, you’ll have previous experience working with Operational Technology(OT)/ Industrial Control Systems (ICS) with good knowledge of risk managementmethodologies such as ISO27005, IEC 62443 3-2 and IRAM2. Knowledge of securityframeworks, security management systems and organisational security controls(e.g. NCSC CAF/NIST/IEC 62443) is also required.
You’ll need to have a structured, methodical and accurate approach with theability to interpret relevant industry regulations and standards. Ideally,you’ll also be familiar with the development and maintenance of managementsystems.
This role requires strong communication and stakeholder management skills, withthe ability to influence beyond your sphere of control.Rewards and benefits
As you help us to shape the future, we’ve shaped our rewards and benefits tohelp you thrive and support your lifestyle:
– Competitive salary – Discretionary group performance-based bonus – 25 days annual leave (plus Bank Holidays) – Single cover private medical insurance – Pension scheme
We’re committed to making a tangible impact on the climate challenge we allface. Drax is where your individual purpose can work alongside your careerdrive. We work as part of a team that shares a passion for doing what’s rightfor the future. With Drax you can shape your career and a future forgenerations to come.
Together, we make it happen.
At Drax, we’re committed to fostering an environment where everyone feelsvalued and respected, regardless of their role. To make this a reality, weactively work to better represent the communities we operate in, fosterinclusion, and establish fair processes. Through these actions, we build thetrust needed for all colleagues at Drax to contribute their perspectives andtalents, no matter their background. Find out more about our approach here.
How to apply
Think this role’s for you? Click the ‘Apply now’ button to begin your Draxjourney.
If you want to find out more about Drax, check out our LinkedIn page to see ourlatest news….