GRC Principal

• Provide day-to-day leadership to the security GRC function, ensuring clear direction and role clarity.
• Develop and manage strong stakeholder relationships and reporting.
• Deliver GRC vision and people management, managing and tracking security risks within the corporate GRC framework.
• Lead solution design and delivery of enterprise compliance initiatives, collaborating with Security Architecture and Assurance.

This role ensures OVO Energy maintains robust security governance and compliance, directly supporting the company's mission to solve the climate crisis by enabling secure, fast-moving operations that reduce risk and protect critical national infrastructure.

• Proven experience as a Security GRC or Risk Manager within UK regulated sectors (e.g., Utilities, Financial Services, or Critical National Infrastructure).
• Understanding of NIS regulations, GDPR, and Ofgem requirements, as well as the forthcoming Cyber Security and Resilience Bill.
• Practical experience operating within a Three Lines of Defence model.
• Ability to engage confidently with Board-level stakeholders regarding risk appetites and strategic trade-offs.

On-target bonus of 15%, 9% Flex Pay (4% auto-enrolled into pension, 5% flexible), 34 days holiday (including bank holidays), healthcare cash plan or private medical insurance, critical illness cover, life assurance, health assessments, gym membership, travel insurance, workplace ISA, will writing services, dental insurance, extra holiday buying, discount dining, home & tech loans, give-as-you-earn donations, up to £400 towards OVO Energy plan, discounts on solar, smart thermostats and EV chargers, ultra-low emission car leasing, cycle to work scheme, public transport season ticket loans.

OVO Energy is on a mission to solve one of humanity's biggest challenges, the climate crisis, by driving Plan Zero and providing sustainable energy solutions.