Information Security Officer

Opis stanowiska

Join us as we work to unlock the value of offshore wind!

JERA Nex bp is a new joint venture between JERA, Japan’s largest power generation company, and bp, one of the world’s leading energy companies. Established to unlock the potential of offshore wind across the globe, our talented team, exciting pipeline, and solid capital commitment give us the potential to become one of the world’s most successful offshore wind companies.

We entered the market with a portfolio of operational and development assets, alongside the resources, capabilities, and resilience to deliver offshore wind energy at scale.

Why this role matters

Ensure the security of JNBP’s Information Technology and that the security meets the expectations of both regulators and shareholders.

In this role you will:

• Evaluate, design, and ensure enforcement of information security policies that align with business needs and regulatory requirements such as ISO 27001, NIST, GDPR, and relevant local regulations
• Assure the organisation’s information security management system (ISMS) is managed, extend the ISMS across the group, and drive continuous improvement to meet accreditation standards (e.g., ISO 27001:2022)
• Drive the integration of security controls into business operations and digital solutions in collaboration with Digital, O&M, Legal, and Audit
• Oversee and support incident response planning and investigations, including coordination with legal and disciplinary processes when necessary
• Oversee that regular risk assessments and audits are conducted to identify vulnerabilities and implement mitigation strategies
• Monitor emerging threats and regulatory changes, steering updates to policies and controls accordingly
• Guarantee that information security documentation and evidence are maintained as required for external audits and certification processes
• Lead compliance initiatives to ensure adherence to legal, statutory, regulatory, and contractual obligations related to information security
• Promote, and where necessary lead, security awareness and training across the organisation to ensure all employees understand and comply with security policies
• Ensure and consolidate reporting of security incidents and audits as required by leadership, shareholders, and regulators

Job requirements

To be successful in the role you will bring:

• Professional certifications such as CISSP (Certified Information Systems Security Professional)
• In-depth understanding of information security frameworks (e.g., ISO/IEC 27001, NIST)
• Strong grasp of risk management principles and practices
• Proficiency in security technologies, particularly the Microsoft suite, and zero trust security architecture
• Familiarity with data privacy laws and regulations (e.g., GDPR)
• Experience with incident response, disaster recovery, and business continuity planning
• Ability to conduct security audits and vulnerability assessments
• Minimum of 5 years of experience in information security
• Proven track record of developing and implementing security policies and procedures

What you can expect from us

Working at JERA Nex bp means being part of a global leader in offshore wind, where innovation, collaboration, and sustainability drive everything we do. You’ll enjoy:

• A collaborative and inclusive work culture, with space for team-building and social activities
• Flexible working hours and the opportunity to work from home, with regular in-person connection
• Opportunities for career growth and professional development in a fast-growing international company