ISO27001 Programme Delivery Lead – 18 Month FTC

Ovo Energy

Role OVO-View

Team: Information Security Office

Salary banding: £71,240.00 – £102,584

Experience: Expert

Working pattern: Full Time / FTC – 18 months

Reporting to: Raymond Fenton – Head of Information Security Office

Sponsorship: Unfortunately we are unable to offer sponsorship for this role.

This role in 3 words: To lead, develop and innovate

Top 3 qualities for this role: Collaborative, Problem-Solving and Delivery focussed

Where you’ll work:

At OVO, we understand that a one size fits all approach doesn’t work for everyone. That’s why we created the OVO Way of Flexibility.

All our roles are hub based (Bristol, Glasgow or London), providing a dedicated space for collaboration, connection and teamwork. You’ll also have the flexibility to work from home.

Everyone belongs at OVO

At OVO, we are on a mission to solve one of humanity’s biggest challenges, the climate crisis. And we know it takes all of us to change the world. That’s why we need diverse people from all abilities, gender identities, ethnicities, ages, sexual orientations, life experiences and backgrounds to join us.

Teamworking for the planet

Everything we do here spins around Plan Zero. So, naturally, the team you’ll be joining plays a gigantic role in making that happen. Here’s how:

We’re hiring creators, challengers and coaches. Every role puts people at the heart of our information security strategy and uses technology and operational processes to build a resilient and performant business. The Path to Zero is paved with well-informed risk and reward decisions!

This role in a nutshell:

This pivotal position within our Technology Function, offers a unique blend of leadership, strategy, and hands-on involvement in protecting OVO’s critical information assets and systems. As the ISO27001 Programme Lead, you’ll be coordinating control owners and control improvement initiatives to ensure OVO has the evidence of coverage and effectiveness necessary to achieve ISO27001 certification in 2025.

Your key outcomes will be:

• Lead OVO’s ISO 27001:2022 programme, and be accountable for assessment and certification of OVO’s Information Security Management System upgrade.
• Organise and lead a ‘Centre of Excellence’ for ISO 27001 leaders across business and technology departments.
• Identify opportunities for continuous improvement and share best practices.
• Manage relationships with third-party auditors and achieve ISMS audit efficiencies through common data collection and sharing APIs and practices.
• Lead the reporting, dashboards, and analysis of programme status and effectiveness.
• Lead delivery of initiatives to develop and configure tools to support cybersecurity governance, risk, and compliance management including ISO toolkits and job aids to enhance performance and productivity.
• Report to senior leadership on non-conformities, action plans, and remediation progress.
• Foster an environment that encourages innovation and continuous improvement in risk and compliance.
• Support OVO’s privacy and security GRC team on their initiatives and in their interactions on information security risk and control matters.

You’ll be a successful ISO27001 Programme Delivery Lead at OVO if you

• Proven experience in governance, risk management, and compliance programmes.
• Hands-on experience implementing and leading ISO 27001 certification in a large-scale enterprise with more than 500 software engineers.
• Working knowledge of risk frameworks and industry best practices (e.g., ISO 27001, NIST CSF, SOC 2).
• Ability to work cross-functionally within a complex organisation and communicate with senior leadership.
• Experience implementing repeatable and automatable processes to meet GRC requirements.
• Strong ethics, integrity, and advocacy for diversity, equity, and inclusion.
• Adaptability to shifting priorities and problem-solving capabilities.
• Proven people, portfolio, programme, and project management skills.

Let’s talk about what’s in it for you

We’ll pay you between £71,240.00 – £102,584 depending on your specific skills and experience. If your expectations are a little different, have a chat with us!

We keep our pay ranges broad on purpose to give us, and you, flexibility to match your experience to our zero carbon mission.

You’ll be eligible for an on-target bonus of 15%. We have one OVO bonus plan that focuses on the collective performance of our people to deliver our Plan Zero goal.

We also offer plenty of green benefits and progressive policies to help you feel like you belong at OVO and there’s flex pay. It’s an extra 9% of your salary on top of your core pay to use as you like. You can take it as cash, add to your pension, or choose to spend it on a huge range of flex benefits.

Here’s a taster of what’s on offer:

For starters, you’ll get 34 days of holiday (including bank holidays).

For your health
With benefits like a healthcare cash plan or private medical insurance depending on your career level, critical illness cover, life assurance, health assessments, and more

For your wellbeing
With gym membership, gadget, travel and cyber insurance, workplace ISA, will writing services, DNA testing, dental insurance, and more

For your lifestyle
With extra holiday buying, discount dining, culture cards, tech loans, and supporting your favourite charities with give-as-you-earn donations

For your home
Get up to £300 off any OVO Energy plan (when you pay by Direct Debit), plus personal carbon offsetting and great discounts on smart thermostats and EV chargers

For your commute
Nab a great deal on ultra-low emission car leasing, plus our cycle to work scheme and public transport season ticket loans

Want to hear about our full range of flexible benefits and progressive people policies? Our People Team can tell you everything you need to know.

For your Belonging

To find better ways to support our people, we need to listen to each other’s experiences and find ways to build a truly inclusive and diverse workplace. As part of this, we have 8 Belonging Networks at OVO. Led by our people, for our people – so when you join OVO, you can play a part – big or small – with any of the Networks. It’s up to you.

Oh, and one last thing

We’d be thrilled if you tick off all our boxes yet we also believe it’s just as important we tick off all of yours. And if you think you have most of what we’re looking for but not every single thing, go ahead and hit apply. We’d still love to hear from you! If you have any additional requirements, there’s a space to let us know on the application form; we want to make the process as easy and comfortable for you as possible