Cyber Security Consultant

- Define and deliver a multi-tier Cyber Incident Management strategy, aligned to enterprise risk and integrated with wider incident and crisis frameworks - Drive the maturity and optimisation of the existing incident management function, identifying gaps and implementing improvements - Own and maintain the Incident Management standards, policies, and processes within the ISMS, ensuring alignment with best practice and regulatory expectations - Establish metrics, KPIs, and reporting to measure capability effectiveness and drive continuous improvement - Manage budgets and resource planning to support capability development and ongoing optimisation - Ensure comprehensive incident response and crisis management plans are in place across all levels of the organisation - Design and deliver a structured exercising programme (tabletop, simulation, red team scenarios) aligned to real-world threats in the energy sector - Embed a culture of continuous learning, ensuring lessons learned are captured and translated into measurable improvements - Develop executive-level communication strategies, including briefing packs and reporting frameworks for major incidents - Act as a key point of coordination during high-severity incidents and crisis scenarios - Build and maintain strong relationships with internal stakeholders and external partners - Influence and engage senior leadership to ensure organisation-wide alignment and readiness