Risk + Governance Lead

Company: Iberdrola
Apply for the Risk + Governance Lead
Location: Glasgow
Job Description:

Risk + Governance Lead

Location: Glasgow

Salary: £59-74K (up to 15% bonus, private healthcare and 15% pension)

Job Type: Permanent, Hybrid (2-3 days in office per week)

What you’ll be doing

As Cyber Risk Lead, you will take ownership of identifying, assessing, and managing cyber risks across SPEN. You will maintain and develop the cyber risk register, lead comprehensive risk assessments, and oversee the implementation of risk treatment plans aligned with business objectives and risk appetite. Working closely with the Head of Governance, Risk and Assurance, you will support all aspects of operational technology (OT) risk management and governance, contributing to a broader cyber risk function that underpins SPEN’s commitment to resilience and regulatory compliance, including alignment with NIS requirements.

The role also involves shaping and strengthening cyber governance frameworks, ensuring they meet evolving regulatory expectations and industry good practice. You will act as a key point of coordination across stakeholders, including control and risk owners as well as external regulators, helping to promote awareness, transparency, and accountability in cyber risk management. Through clear communication and reporting to senior leadership, you will support informed decision‑making and continuous improvement of SPEN’s cyber security posture.

What you’ll bring

We are looking for a professional with a strong background in cyber security risk and governance within a complex organisation. Experience in developing cyber policies, conducting risk assessments, and managing risk treatment plans is essential, along with an understanding of the regulatory landscape affecting IT and OT environments in the energy sector. Relevant industry certifications such as CISSP, CISM, or GICSP will be beneficial, as will experience operating within large‑scale or global environments. The ability to engage effectively with stakeholders, lead discussions on emerging risks, and translate technical risk into business context will be key to success in this role.

What’s in it for you

  • 36 days annual leave
  • Holiday purchase – extra annual leave to balance work and life
  • Share Incentive Plan and Sharesave Scheme
  • Payroll giving and charity matched funding
  • Technology Vouchers – save more on your technology needs
  • Commitment to reduce carbon emissions and support climate action
  • Electric Vehicle Schemes – to support green driving
  • Cycle to Work scheme and public transport season ticket loans
  • Options to purchase dental insurance, private medical insurance, health cash plan and annual health assessments
  • Life Assurance (4× salary)
  • Access to nudge financial wellbeing support
  • Shopping, leisure, restaurant and gym discounts, plus exclusive employee deals on travel insurance and more

We are committed to providing reasonable support or adjustments in our recruiting processes for candidates with disabilities, long‑term conditions, mental health conditions, or who are neurodivergent or require pregnancy‑related support. If you need support, please reach out to careers@scottishpower.com.

Inclusion, diversity, and a social purpose are at the heart of everything we do. Together with our values, they bring us together into a stronger, more sustainable business with direct links to the communities we serve.

#J-18808-Ljbffr…

Posted: July 14th, 2026