Join us as we work to unlock the value of offshore wind! JERA Nex bp is a new joint venture between JERA, Japan’s largest power generation company, and bp, one of the world’s leading energy companies. Established to unlock the potential of offshore wind across the globe, our talented team, exciting pipeline and solid capital commitment give us the potential to become one of the world’s most successful offshore wind companies.

We entered the market with a portfolio of operational and development assets, alongside the resources, capabilities and resilience to deliver offshore wind energy at scale.

Why this role matters

Ensure the security of JNBP’s Information Technology and that the security meets the expectations of both regulators and shareholders.

In this role you will:

· Evaluate, design and ensure enforcement of the information security policies that align with business needs and regulatory requirements such as ISO 27001, NIST, GDPR, and relevant local regulations

· Assure the organisation’s information security management system (ISMS) is managed, extend the ISMS across the group, and drive continuous improvement to meet accreditation standards (e.g., ISO 27001:2022)

· Drive the integration of security controls into business operations and digital solutions in collaboration with Digital, O&M, legal and audit

· Oversee and support incident response planning and investigations, including coordination with legal and disciplinary processes when necessary

· Oversee that regular risk assessments and audits are conducted to identify vulnerabilities and implement mitigation strategies

· Monitor emerging threats and regulatory changes, steering to updating policies and controls accordingly

· Guarantee information security documentation and evidence is maintained as required for external audits and certification processes

· Lead compliance initiatives to ensure adherence to legal, statutory, regulatory, and contractual obligations related to information security

· Promote and where necessary lead security awareness and training across the organisation to ensure all employees understand and comply with security policies

· Ensure and consolidate reporting of incident security incidents and audits as required by leadership, shareholders and regulators.