Security and Risk Specialist

About the role

Security and Risk Specialist – Permanent position within

E.ON UK’s Digital Technology function. The role can be based at Nottingham, Kingswinford or Solihull and offers a hybrid working model.

• Lead the management of IT security risks and controls across
  
  E.ON UK, including supplier compliance, audits, certifications, and accreditations.
• Define, implement, and maintain robust security controls across a complex multi‑supplier technology environment.
• Assess, document, and treat security risks, ensuring appropriate mitigation plans are developed and delivered.
• Act as a security and risk champion across Digital Technology, providing guidance, coaching, and support to teams and suppliers.
• Chair and represent
  
  E.ON in supplier security working groups and the wider
  
  E.ON security community, including engagement with CERT.
• Set standards for security documentation, reviewing supplier outputs and ensuring alignment with best practice.
• Scope, commission, and interpret penetration testing activities, translating findings into business‑focused risk and remediation plans.
• Manage security vulnerabilities by working with suppliers to identify, evaluate and remediate risks.
• Work closely with Information Security, Internal Controls, Audit Services, and senior stakeholders to ensure continuity and consistency of controls.
• Coach and support junior team members, contributing to capability and knowledge development across the function.

• At least 5 years’ experience in IT security and architecture.
• Strong experience working with cloud computing technologies.
• Knowledge and practical experience of ISO 27001 and ISO 27002, including operating within an ISMS.
• Proven track record of delivering security improvement initiatives and security awareness programmes.
• Experience applying industry best practice frameworks such as NCSC, NIST, OWASP, SAMM, or SABSA.
• Ability to provide security consultancy across multiple projects, advising on risk, treatment options, and controls.
• Demonstrable experience conducting information security risk assessments, threat modelling and guiding others on effective risk management.
• Experience scoping and managing penetration testing for internal and third‑party solutions.
• Excellent written and verbal communication skills, with the ability to translate technical risk into business language.

• Experience working in a multi‑site, multi‑vendor environment.
• Knowledge of vulnerability management tools such as Qualys or Wiz.
• Professional security qualifications (e.g. CISSP, ISSAP, CISM, CRISC).
• Experience providing third‑party security assurance during supplier selection and contract management.
• Experience implementing or auditing ISO 27001, ideally as a lead auditor or implementer.

• Award‑Winning Workplace – We’re proud to be named a Sunday Times Best Place to Work 2025 and the Best Place to Work for 16–34‑year‑olds.
• Outstanding Benefits – Enjoy 26 days of annual leave plus bank holidays, a generous pension, life cover, bonus opportunities, and access to 20 flexible benefits with tax/NI savings.
• Flexible & Family‑Friendly – Our industry‑leading hybrid and family‑friendly policies earned us double recognition at the Personnel Today Awards 2024. We’re open to discussing how flexibility can work for you.
• Inclusive & Diverse – We’re the only energy company in the Inclusive Top 50 UK Employers and winners of Best Employer for Women and Human Company of the Year.
• Support at Every Stage of Life – We’re Fertility Friendly and Menopause Friendly accredited, with inclusive support for everyone.
• Accessible & Supportive – As a Disability Confident Employer, we guarantee interviews for disabled applicants who meet the minimum criteria and will make any adjustments needed during the process.
• Invested in Your Growth – From inclusive talent networks to top‑tier development programmes, we’ll support your growth every step of the way.

E.ON is committed to being an inclusive employer. We recognise that everyone is different and we aim to provide a working environment where each person feels respected, valued and able to achieve their full potential. We are happy to consider flexible working arrangements and are happy to consider reasonable adjustments if you require any.

Reference no.: 241965
Closing date: 21/01/2026
Salary: £71,277 – £85,059

For questions relating to this role please contact Clare Lees on