Cyber Security Lead

Brook Green Supply are an independent B2B energy supply company. You will be working alongside a vastly experienced team who have operated in the energy industry for many years, providing a fantastic career opportunity for a determined, flexible, and driven individual, with personal development and progression aligned to the continued growth and success of the business.
 
Reporting directly to the Operations Director, the Cyber Security Lead is accountable for cyber security governance and delivery across Brook Green Supply. You will set direction, prioritise security initiatives, and improve security posture across people, process, and technology. You will partner with departments across the business, as well as suppliers, to embed secure-by-design and respond effectively to incidents.
 
Essential Functions of the Job:
 

• Own and drive the cyber security roadmap, aligning priorities to business risk, regulatory expectations, and technology delivery plans.
• Lead delivery of security initiatives across cross-functional teams and third parties, from discovery through implementation and operational handover.
• Define and maintain security governance, including policies, standards, risk acceptance, and control assurance.
• Oversee cloud and software delivery security, embedding DevSecOps practices, threat modelling, and secure configuration baselines.
• Run cyber risk management, including vulnerability management, penetration testing coordination, and remediation tracking.
• Own incident management for cyber events, including response playbooks, coordination, communications, and post-incident learning.
• Strengthen monitoring and detection by using security telemetry, threat intelligence, and clear KPIs to build the operational picture.
• Manage supplier and third-party security risk, including due diligence, contract security requirements, and ongoing assurance.
• Plan and deliver security awareness and role-based training, improving security culture across the business.
• Support adoption of recognised frameworks and assurance activity, including NIST-aligned controls and ISO 27001 readiness and audits where applicable.

 
Skills & Experience Required:
 

• Proven track record leading cyber security improvement in a cloud-first environment, balancing hands-on delivery with governance and stakeholder management.
• Strong knowledge of security frameworks and assurance, including NIST, ISO 27001, GDPR, and SOC concepts. Experience of audit preparation and evidence management.
• Experience implementing and operating security controls across identity and access, endpoints, networks, cloud platforms, and SaaS tooling.
• Good understanding of secure software delivery and DevSecOps, including CI/CD security, secrets management, and threat modelling.
• Experience with incident response, including tabletop exercises, playbooks, and coordination of technical and business communications.
• Confident working with security data, monitoring tools, and threat intelligence to create actionable insights and prioritisation.
• Excellent written and verbal communication. Able to translate technical risk into business impact and decisions.
• Comfortable managing third parties, including MDR or SOC providers, consultants, and technology vendors.
• Relevant certifications are valued. Examples include CISSP, CISM, Security+, ISO 27001 Lead Implementer or Auditor, and cloud security certifications (Azure or AWS).

 
Brook Green Supply is committed to ensuring equal opportunities, fairness of treatment, dignity and respect, and the elimination of all forms of discrimination in the workplace for all employees/contractors and job applicants. We will never ask if you have a disability at any point in the recruitment process. However, if you require any specific accommodations during the interview process, please let us know and we will do our best to support you.